Totolink vulnerabilities
Published CVEs affecting Totolink products: 305 record(s), with severity, exploitation and fixes.
A8000RU 50A7100RU 40A3300r Firmware 37Totolink 30A3300R 15Lr350 Firmware 14A3002MU 14A800R 10N300RH 10A7000r Firmware 10CA750-PoE 9NR1800X 9WA300 8LR350 7Nr1800x Firmware 7A950rg Firmware 6N600r Firmware 5X5000r Firmware 5X6000R 5A7000R 5A720r Firmware 4Lr1200gb Firmware 4N600R 4X5000R 4X6000r Firmware 4EX200 4A3600r Firmware 3A3002ru Firmware 3CP450 3EX1200L 3N300RT 3Wa300 Firmware 3N300rh Firmware 2A3600R 2A950RG 2N200re Firmware 2WA1200 1A720R 1N150RT 1CS185R T10 1
CVE-2025-60334
High · 7.5
CWE-121 Oct 22, 2025
Stack-based Buffer Overflow in Totolink N600r Firmware
TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-60333
High · 7.5
CWE-121 Oct 22, 2025
Stack-based Buffer Overflow in Totolink N600r Firmware
TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-11444
High · 8.8
CWE-119 Oct 8, 2025
TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow
A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-11005
Critical · 9.8
CWE-78 Sep 25, 2025
TOTOLINK X6000R Unauthenticated Command Injection Vulnerability
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458_B20250708.
CVE-2025-52905
High · 7.5
CWE-20 Sep 23, 2025
TOTOLINK X6000R Argument Injection Vulnerability
Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360_B20241207.