totolink

1,237 tracked vulnerabilities.

CVE-2022-38827 CRITICAL
TOTOLINK T6 V4.1.5cu.709_B20210518 - Buffer Overflow
Sep 16, 2022
CVSS 9.8
EPSS 0.12
CVE-2022-38826 CRITICAL
TOTOLINK T6 V4.1.5cu.709_B20210518 - Command Injection
Sep 16, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-38823 CRITICAL
TOTOLINK T6 V4.1.5cu.709_B20210518 - Info Disclosure
Sep 16, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-38535 HIGH
TOTOLINK A720R Firmware v4.1.5cu.374 - Remote Code Execution via setTracerouteCfg Function
Sep 15, 2022
CVSS 7.2
EPSS 0.02
CVE-2022-38534 HIGH
TOTOLINK A720R Firmware v4.1.5cu.374 - Remote Code Execution via setdiagnosicfg Function
Sep 15, 2022
CVSS 7.2
EPSS 0.02
CVE-2022-38308 CRITICAL
TOTOLink A700RU 7.4cu.2313_B20191024 - Command Injection
Sep 14, 2022
CVSS 9.8
EPSS 0.20
CVE-2022-40112 HIGH
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 - Buffer Overflow via Hostname Parameter
Sep 06, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-40111 CRITICAL
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 - Use of Hard-coded Credentials
Sep 06, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-40110 HIGH
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 - Buffer Overflow in /bin/boa
Sep 06, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-40109 CRITICAL
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 - Insecure Permissions in /bin/boa
Sep 06, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-37843 CRITICAL
TOTOLINK A860R V4.1.2cu.5182_B20201027 - OS Command Injection via cstecgi.cgi
Sep 06, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-37842 CRITICAL
TOTOLINK A860R V4.1.2cu.5182_B20201027 - Buffer Overflow via infostat.cgi Parameters
Sep 06, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-37841 HIGH
TOTOLINK A860R V4.1.2cu.5182_B20201027 - Use of Hard-coded Credentials
Sep 06, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-37840 CRITICAL
TOTOLINK A860R V4.1.2cu.5182_B20201027 - Buffer Overflow in downloadfile.cgi
Sep 06, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-37839 CRITICAL
TOTOLINK A860R V4.1.2cu.5182_B20201027 - Buffer Overflow via Cstecgi.cgi
Sep 06, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-32993 CRITICAL
TOTOLINK A7000R V4.1cu.4134 - Auth Bypass
Aug 29, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-38511 HIGH
TOTOLINK A810R V5.9c.4050_B20190424 - Command Injection
Aug 29, 2022
CVSS 7.8
EPSS 0.01
CVE-2022-36616 HIGH
TOTOLINK A810R V4.1.2cu.5182_B20201026 and V5.9c.4050_B20190424 - Use of Hard-coded Credentials
Aug 29, 2022
CVSS 7.8
EPSS 0.00
CVE-2022-36615 HIGH
TOTOLINK A3000RU V4.1.2cu.5185_B20201128 - Use of Hard-coded Credentials
Aug 29, 2022
CVSS 7.8
EPSS 0.00
CVE-2022-36614 HIGH
TOTOLINK A860R V4.1.2cu.5182_B20201027 - Use of Hard-coded Credentials
Aug 29, 2022
CVSS 7.8
EPSS 0.00
CVE-2022-36613 HIGH
TOTOLINK N600R V4.3.0cu.7647_B20210106 - Use of Hard-coded Credentials
Aug 29, 2022
CVSS 7.8
EPSS 0.00
CVE-2022-36612 HIGH
TOTOLINK A950RG V4.1.2cu.5204_B20210112 - Use of Hard-coded Credentials
Aug 29, 2022
CVSS 7.8
EPSS 0.00
CVE-2022-36611 HIGH
TOTOLINK A800R V4.1.2cu.5137_B20200730 - Use of Hard-coded Credentials
Aug 29, 2022
CVSS 7.8
EPSS 0.00
CVE-2022-36610 HIGH
TOTOLINK A720R V4.1.5cu.532_B20210610 - Use of Hard-coded Credentials
Aug 29, 2022
CVSS 7.8
EPSS 0.00
CVE-2022-37084 HIGH
TOTOLINK A7000R V9.1.0u.6115_B20201022 - Stack Overflow via sPort Parameter in addEffect Function
Aug 25, 2022
CVSS 7.8
EPSS 0.00
Products
x5000r_firmware 70 a3300r_firmware 64 a3002r_firmware 61 x6000r_firmware 57 A8000RU 50 a3002ru_firmware 49 a3100r_firmware 47 x2000r_firmware 45 a3700r_firmware 43 A7100RU 40 t6_firmware 39 n600r_firmware 38 a7100ru_firmware 37 ex1200t_firmware 37 lr350_firmware 36 a7000r_firmware 35 a950rg_firmware 33 a702r_firmware 32 a810r_firmware 29 a720r_firmware 28 ex1800t_firmware 28 nr1800x_firmware 27 t8_firmware 26 a3000ru_firmware 25 a3600r_firmware 25 a830r_firmware 25 x15_firmware 25 ca300-poe_firmware 24 a800r_firmware 23 t10_firmware 22
Quick Filters
Critical CVEs With Exploits In CISA KEV