VYPR
← Totolink

Vendor CVEs

Totolink

All CVEs

1,425 total · sorted by risk
  • CVE-2018-13314CriNov 27, 2018
    Totolink
    A3002RU
    risk 0.64cvss 9.8epss 0.03

    System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ipAddr" POST parameter.

  • CVE-2018-13307CriNov 27, 2018
    Totolink
    A3002RU
    risk 0.64cvss 9.8epss 0.03

    System command injection in fromNtp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ntpServerIp2" POST parameter. Certain payloads cause the device to become permanently inoperable.

  • CVE-2018-13306CriNov 27, 2018
    Totolink
    A3002RU
    risk 0.64cvss 9.8epss 0.03

    System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ftpUser" POST parameter.

  • CVE-2018-13315CriNov 26, 2018
    Totolink
    A3002RU
    risk 0.64cvss 9.8epss 0.01

    Incorrect access control in formPasswordSetup in TOTOLINK A3002RU version 1.0.8 allows attackers to change the admin user's password via an unauthenticated POST request.

  • CVE-2018-13311CriNov 26, 2018
    Totolink
    A3002RU
    risk 0.64cvss 9.8epss 0.02

    System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "sambaUser" POST parameter.

  • CVE-2017-1000020CriJul 17, 2017
    Ecos
    Embedded Web Servers
    risk 0.64cvss 9.8epss 0.02

    SYN Flood or FIN Flood attack in ECos 1 and other versions embedded devices results in web Authentication Bypass. "eCos Embedded Web Servers used by Multiple Routers and Home devices, while sending SYN Flood or FIN Flood packets fails to validate and handle the packets and does…

  • CVE-2025-34319CriDec 3, 2025
    Totolink
    CX-N300RT
    risk 0.61cvss —epss 0.04

    TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 (discovered in V2.1.8-B20201030.1539) contain an OS command injection vulnerability in the Boa formWsc handling functionality. An unauthenticated attacker can send specially crafted requests to trigger…

  • CVE-2025-52089HigJul 11, 2025
    Totolink
    N300rb Firmware
    risk 0.61cvss 8.8epss 0.08

    A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authenticated attacker to execute arbitrary OS commands with root privileges.

  • CVE-2026-1723CriJan 30, 2026
    Totolink
    X6000R
    risk 0.60cvss —epss 0.01

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1498_B20250826.

  • CVE-2026-51743CriSep 1, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to disable guest virtual AP interfaces via sending a crafted MQTT message to the cs_broker component.

  • CVE-2026-51736CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase system logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51731CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove VLAN entries via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51730CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Wi-Fi ACL rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51729CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to request deletion of a managed slave device via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51726CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the delParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove parental-control rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51725CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the device clock via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51722CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the setWiFiRepeaterCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to repoint the device to an attacker-controlled upstream Wi-Fi via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51720CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51717CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the setOpModeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the device operating mode via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51711CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the setWiFiWpsStart function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to open a wireless pairing window via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51710CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the setParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter parental-control behavior via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51701CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the setMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change device access control via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51681CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose WAN-side administration via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51680CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify LED behavior via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51679CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the administrator account via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51677CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the setUPnPCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change UPnP service state via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51676CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the setAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter access-device policies via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51675CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the setWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure uplink settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51672CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the getRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain the roaming enablement flag via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51669CriAug 31, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the getPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain pairing and mesh-slave configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-82539CriAug 30, 2026
    Totolink
    A720R
    risk 0.59cvss 9.1epss 0.01

    A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched…

  • CVE-2026-51661CriAug 28, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the getPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain port-forwarding rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51660CriAug 28, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51657CriAug 28, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the getSyslogCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain syslog-related configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51649CriAug 28, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the getDiagnosisCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain diagnostic configuration and ping log contents via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51646CriAug 28, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the getParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain parental-control rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51643CriAug 28, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain NTP configuration and current time data via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51636CriAug 28, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the getWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Wi-Fi ACL rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51628CriAug 28, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to generate and retrieve a new WPS PIN via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51626CriAug 28, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WPS configuration, including the current PIN, via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2026-51622CriAug 28, 2026
    Totolink
    T6
    risk 0.59cvss 9.1epss 0.00

    Incorrect access control in the getWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WAN configuration data via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

  • CVE-2025-55895CriDec 15, 2025
    Totolink
    N200RE
    risk 0.59cvss 9.1epss 0.00

    TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Attackers can send payloads to the interface without logging in (remote).

  • CVE-2024-31815CriApr 8, 2024
    Totolink
    EX200
    risk 0.59cvss 9.1epss 0.01

    In TOTOLINK EX200 V4.0.3c.7314_B20191204, an attacker can obtain the configuration file without authorization through /cgi-bin/ExportSettings.sh

  • CVE-2022-46025CriJan 10, 2024
    Totolink
    N200RE
    risk 0.59cvss 9.1epss 0.01

    Totolink N200RE_V5 V9.3.5u.6255_B20211224 is vulnerable to Incorrect Access Control. The device allows remote attackers to obtain Wi-Fi system information, such as Wi-Fi SSID and Wi-Fi password, without logging into the management page.

  • CVE-2019-19824HigJan 27, 2020
    Totolink
    A3002RU
    risk 0.59cvss 8.8epss 0.25

    On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available. This allows for full control over the device's internals. This affects…

  • CVE-2025-8140HigJul 25, 2025
    Totolink
    A702R
    risk 0.58cvss 8.8epss 0.08

    A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formWlanMultipleAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to…

  • CVE-2025-8138HigJul 25, 2025
    Totolink
    A702R
    risk 0.58cvss 8.8epss 0.08

    A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formOneKeyAccessButton of the component HTTP POST Request Handler. The manipulation of the argument submit-url…

  • CVE-2025-5907HigJun 10, 2025
    Totolink
    EX1200T
    risk 0.58cvss 8.8epss 0.06

    A vulnerability classified as critical was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack can be…

  • CVE-2025-5905HigJun 10, 2025
    Totolink
    T10
    risk 0.58cvss 8.8epss 0.11

    A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been rated as critical. Affected by this issue is the function setWiFiRepeaterCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument Password leads to buffer…

  • CVE-2025-5904HigJun 10, 2025
    Totolink
    T10
    risk 0.58cvss 8.8epss 0.11

    A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument device_name leads to…

Page 12 of 29