CVE Intelligence

Vulnerabilidades do Totolink A7000r Firmware

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Totolink A7000r Firmware: 10 registro(s), com versões afetadas e correções.
cpe:2.3:o:totolink:a7000r_firmware

CVE-2026-1623 Média · 6.3 CWE-74 29/01/2026
Totolink A7000R cstecgi.cgi setUpgradeFW command injection
A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument FileName causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-1601 Média · 6.3 CWE-74 29/01/2026
Totolink A7000R cstecgi.cgi setUploadUserData command injection
A weakness has been identified in Totolink A7000R 4.1cu.4154. The impacted element is the function setUploadUserData of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument FileName can lead to command injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-1548 Alta · 8.8 CWE-77 28/01/2026
Totolink A7000R cstecgi.cgi CloudACMunualUpdateUserdata command injection
A flaw has been found in Totolink A7000R 4.1cu.4154. This impacts the function CloudACMunualUpdateUserdata of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument url causes command injection. The attack can be initiated remotely. The exploit has been published and may be used.
CVE-2026-1547 Crítica · 9.8 CWE-77 28/01/2026
Injeção de comando no firmware Totolink A7000R em cstecgi.cgi (CVE-2026-1547)
Foi detectada uma vulnerabilidade no Totolink A7000R 4.1cu.4154. Isso afeta a função setUnloadUserData do arquivo /cgi-bin/cstecgi.cgi. A manipulação do argumento plugin_name resulta em injeção de comando. É possível lançar o ataque remotamente. O exploit agora está público e pode ser usado.
CVE-2025-63154 Alta · 7.5 CWE-121 10/11/2025
Stack-based Buffer Overflow em Totolink A7000r Firmware
TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the addEffect parameter of the urldecode function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVE-2025-63153 Alta · 7.5 CWE-121 10/11/2025
Stack-based Buffer Overflow em Totolink A7000r Firmware
TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63459 Alta · 7.5 CWE-121 31/10/2025
Stack-based Buffer Overflow em Totolink A7000r Firmware
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_421CF0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63462 Alta · 7.5 CWE-121 31/10/2025
Stack-based Buffer Overflow em Totolink A7000r Firmware
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63461 Alta · 7.5 CWE-121 31/10/2025
Stack-based Buffer Overflow em Totolink A7000r Firmware
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63460 Alta · 7.5 CWE-121 31/10/2025
Stack-based Buffer Overflow em Totolink A7000r Firmware
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_4222E0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.