totolink

1,236 tracked vulnerabilities.

CVE-2025-5504 MEDIUM
TOTOLINK X2000R 1.0.0-B20230726.1108 - Command Injection
Jun 03, 2025
CVSS 6.3
EPSS 0.15
CVE-2025-5503 HIGH
TOTOLINK X15 1.0.0-B20230714.1105 - Buffer Overflow
Jun 03, 2025
CVSS 8.8
EPSS 0.04
CVE-2025-5502 MEDIUM
TOTOLINK X15 1.0.0-B20230714.1105 - Command Injection
Jun 03, 2025
CVSS 6.3
EPSS 0.08
CVE-2025-45862 MEDIUM
TOTOLINK A3002R v4.0.0-B20230531.1404 - Stack-based Buffer Overflow via interfacenameds Parameter
May 20, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-4852 LOW
TOTOLINK A3002R 2.1.1-B20230720.1011 - Stored Cross-Site Scripting via VPN Page Comment Parameter
May 18, 2025
CVSS 2.4
EPSS 0.00
CVE-2025-4851 MEDIUM
TOTOLINK N300RH 6.1c.1390_B20191101 - OS Command Injection via FileName Parameter in setUploadUserData
May 18, 2025
CVSS 6.3
EPSS 0.01
CVE-2025-4850 MEDIUM
TOTOLINK N300RH 6.1c.1390_B20191101 - OS Command Injection via plugin_name Parameter
May 18, 2025
CVSS 6.3
EPSS 0.01
CVE-2025-4849 MEDIUM
TOTOLINK N300RH 6.1c.1390_B20191101 - OS Command Injection via CloudACMunualUpdateUserdata URL Parameter
May 18, 2025
CVSS 6.3
EPSS 0.01
CVE-2025-4835 HIGH
TOTOLINK A702R, A3002R, A3002RU 3.0.0-B20230809.1615 - Buffer Overflow via Redirect-URL Parameter
May 17, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4834 HIGH
TOTOLINK A702R, A3002R, A3002RU 3.0.0-B20230809.1615 - Buffer Overflow via HTTP POST Request Handler
May 17, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4833 HIGH
TOTOLINK A702R, A3002R, and A3002RU 3.0.0-B20230809.1615 - Buffer Overflow via NTP Form POST Request
May 17, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4832 HIGH
TOTOLINK A702R, A3002R, and A3002RU 3.0.0-B20230809.1615 - Buffer Overflow via HTTP POST Request Handler
May 17, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4831 HIGH
TOTOLINK A702R, A3002R, and A3002RU 3.0.0-B20230809.1615 - Buffer Overflow via Site Survey Profile POST Request
May 17, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4830 HIGH
TOTOLINK A702R, A3002R, and A3002RU 3.0.0-B20230809.1615 - Buffer Overflow via HTTP POST Request Handler
May 17, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4829 HIGH
TOTOLINK A702R, A3002R, A3002RU 3.0.0-B20230809.1615 - Buffer Overflow via HTTP POST Request Handler
May 17, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4827 HIGH
TOTOLINK A702R, A3002R, and A3002RU 3.0.0-B20230809.1615 - Buffer Overflow via HTTP POST Request Handler
May 17, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4826 HIGH
TOTOLINK A702R, A3002R, A3002RU 3.0.0-B20230809.1615 - Buffer Overflow
May 17, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4825 HIGH
TOTOLINK A702R, A3002R, A3002RU 3.0.0-B20230809.1615 - Buffer Overflow
May 17, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4824 HIGH
TOTOLINK A702R, A3002R, A3002RU 3.0.0-B20230809.1615 - Buffer Overflow
May 17, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4823 HIGH
TOTOLINK A702R, A3002R, A3002RU 3.0.0-B20230809.1615 - Buffer Overflow
May 17, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4733 HIGH
TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615 - Buffer Overflow via HTTP POST Request Handler mac Argument
May 16, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4732 HIGH
TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615 - Buffer Overflow via HTTP POST Request Handler
May 16, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4731 HIGH
TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615 - Buffer Overflow via HTTP POST Request Handler
May 16, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4730 HIGH
TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615 - Buffer Overflow via devicemac1 Parameter
May 16, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-4729 MEDIUM
TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615 - OS Command Injection via macstr Parameter
May 16, 2025
CVSS 6.3
EPSS 0.01
Products
x5000r_firmware 70 a3300r_firmware 64 a3002r_firmware 61 x6000r_firmware 57 A8000RU 50 a3002ru_firmware 49 a3100r_firmware 47 x2000r_firmware 45 a3700r_firmware 43 A7100RU 40 t6_firmware 39 n600r_firmware 38 a7100ru_firmware 37 ex1200t_firmware 37 lr350_firmware 36 a7000r_firmware 35 a950rg_firmware 33 a702r_firmware 32 a810r_firmware 29 a720r_firmware 28 ex1800t_firmware 28 nr1800x_firmware 27 t8_firmware 26 a3000ru_firmware 25 a3600r_firmware 25 a830r_firmware 25 x15_firmware 25 ca300-poe_firmware 24 a800r_firmware 23 t10_firmware 22
Quick Filters
Critical CVEs With Exploits In CISA KEV