Vulnerabilities

Filters

Reset all

2 selected

37 records

Sort

Vendor: TOTOLINK Component: A7100ru Firmware Clear all filters

TI-2025-28642 CVE-2025-44655 · GHSA-c4ww-38fc-m44w

In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is…

MEDIUM 49

In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00381 Published 2025-07-21 No fix listed CWE-266

TI-2023-06490 CVE-2023-7095 · GHSA-6q84-3g95-w6vx

Totolink A7100RU HTTP POST Request main buffer overflow

MEDIUM 57

A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.137 Published 2023-12-25 No fix listed CWE-120

TI-2023-06311 CVE-2023-6906

Totolink A7100RU HTTP POST Request main buffer overflow

HIGH 82

A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_B20191024.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0185 Published 2023-12-18 No fix listed CWE-120

TI-2023-16578 CVE-2023-33556 · GHSA-wq6h-jj39-jpc2

TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection…

HIGH 82

TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01958 Published 2023-06-07 No fix listed CWE-77

TI-2023-14113 CVE-2023-30054 · GHSA-9457-2hhq-whx3

TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability.

HIGH 82

TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02063 Published 2023-05-05 No fix listed CWE-78

TI-2023-14112 CVE-2023-30053 · GHSA-6r47-mjvc-vvwg

TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.

HIGH 82

TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02063 Published 2023-05-05 No fix listed CWE-78

TI-2023-11853 CVE-2023-26978 · GHSA-68pg-g9hg-f6c6

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2023-04-07 No fix listed CWE-77

TI-2023-11801 CVE-2023-26848 · GHSA-w5p4-j6p3-x252

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2023-04-07 No fix listed CWE-77

TI-2023-11987 CVE-2023-27232 · GHSA-cgjm-x4q6-h8hj

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting/setWanIeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2023-03-28 No fix listed CWE-77

TI-2023-11986 CVE-2023-27231 · GHSA-xh6m-gfx7-237c

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWanIeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02023 Published 2023-03-28 No fix listed CWE-77

TI-2023-11985 CVE-2023-27229 · GHSA-6w9c-2cxm-f6q6

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02023 Published 2023-03-28 No fix listed CWE-77

TI-2023-11942 CVE-2023-27135 · GHSA-wwwp-c2xw-w45v

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02047 Published 2023-03-23 No fix listed CWE-77

TI-2023-10731 CVE-2023-25395 · GHSA-wmcg-26fr-hvrc

TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command…

MEDIUM 46

TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticDhcpRules.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2023-03-08 No fix listed CWE-78

TI-2023-09915 CVE-2023-24184 · GHSA-jhrx-qhh8-456p

TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability.

MEDIUM 51

TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01256 Published 2023-02-21 No fix listed CWE-77

TI-2023-09946 CVE-2023-24238 · GHSA-h5m8-2j4h-7jj8

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parameter at setting/delStaticDhcpRules.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2023-02-16 No fix listed CWE-77

TI-2023-09945 CVE-2023-24236 · GHSA-64q4-mmg7-55cj

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2023-02-16 No fix listed CWE-77

TI-2023-09956 CVE-2023-24276 · GHSA-45g9-v625-vr5r

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2023-02-06 No fix listed CWE-77

TI-2022-23823 CVE-2022-48126 · GHSA-jc8x-vpwq-c9g5

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function.