Vulnerabilidades de Totolink
CVEs publicadas que afetam produtos de Totolink: 272 registro(s), com severidade, exploração e correções.
A8000RU 50A7100RU 40A3300r Firmware 37A3300R 15A3002MU 14Lr350 Firmware 14A800R 10A7000r Firmware 10N300RH 10NR1800X 9CA750-PoE 9WA300 8Nr1800x Firmware 7LR350 7A950rg Firmware 6A7000R 5X6000R 5X5000r Firmware 5N600r Firmware 5X6000r Firmware 4X5000R 4N600R 4A720r Firmware 4Lr1200gb Firmware 4A3002ru Firmware 3N300RT 3Wa300 Firmware 3A3600r Firmware 3CP450 3EX1200L 3N200re Firmware 2EX200 2A3600R 2N300rh Firmware 2A950RG 1AC1200T10 1CS185R T10 1N150RT 1A720R 1A3100R 1
CVE-2025-63464
Alta · 7.5
CWE-121 31/10/2025
Stack-based Buffer Overflow em Totolink Lr350 Firmware
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_42396C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63463
Alta · 7.5
CWE-121 31/10/2025
Stack-based Buffer Overflow em Totolink Lr350 Firmware
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub_4232EC function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63462
Alta · 7.5
CWE-121 31/10/2025
Stack-based Buffer Overflow em Totolink A7000r Firmware
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63461
Alta · 7.5
CWE-121 31/10/2025
Stack-based Buffer Overflow em Totolink A7000r Firmware
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63460
Alta · 7.5
CWE-121 31/10/2025
Stack-based Buffer Overflow em Totolink A7000r Firmware
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_4222E0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63469
Alta · 7.5
CWE-121 31/10/2025
Stack-based Buffer Overflow em Totolink Lr350 Firmware
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_421BAC function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63468
Alta · 7.5
CWE-121 31/10/2025
Stack-based Buffer Overflow em Totolink Lr350 Firmware
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the sub_426EF8 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63467
Alta · 7.5
CWE-121 31/10/2025
Stack-based Buffer Overflow em Totolink Lr350 Firmware
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_425400 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63466
Alta · 7.5
CWE-121 31/10/2025
Stack-based Buffer Overflow em Totolink Lr350 Firmware
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the sub_426EF8 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-12260
Alta · 8.8
CWE-119 27/10/2025
TOTOLINK A3300R POST Parameter cstecgi.cgi setSyslogCfg stack-based overflow
A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024. The impacted element is the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. Such manipulation of the argument enable leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-12259
Alta · 8.8
CWE-119 27/10/2025
TOTOLINK A3300R POST Parameter cstecgi.cgi setScheduleCfg stack-based overflow
A flaw has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. This manipulation of the argument recHour causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.
CVE-2025-12258
Alta · 8.8
CWE-119 27/10/2025
TOTOLINK A3300R POST Parameter cstecgi.cg setOpModeCfg stack-based overflow
A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the component POST Parameter Handler. The manipulation of the argument opmode results in stack-based buffer overflow. The attack may be performed from remote.
CVE-2025-12241
Alta · 8.8
CWE-119 27/10/2025
TOTOLINK A3300R POST Parameter cstecgi.cgi setLanguageCfg stack-based overflow
A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This impacts the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. The manipulation of the argument lang results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
CVE-2025-12240
Crítica · 9.8
CWE-120 27/10/2025
TOTOLINK A3300R cstecgi.cgi setDmzCfg buffer overflow
A security vulnerability has been detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-12239
Crítica · 9.8
CWE-120 27/10/2025
TOTOLINK A3300R cstecgi.cgi setDdnsCfg buffer overflow
A weakness has been identified in TOTOLINK A3300R 17.0.0cu.557_B20221024. The impacted element is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi. Executing manipulation can lead to buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.
CVE-2025-60336
Alta · 7.5
CWE-476 22/10/2025
NULL Pointer Dereference em Totolink N600r Firmware
A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVE-2025-60335
Alta · 7.5
CWE-476 22/10/2025
NULL Pointer Dereference em Totolink N600r Firmware
A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVE-2025-60334
Alta · 7.5
CWE-121 22/10/2025
Stack-based Buffer Overflow em Totolink N600r Firmware
TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-60333
Alta · 7.5
CWE-121 22/10/2025
Stack-based Buffer Overflow em Totolink N600r Firmware
TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-11444
Alta · 8.8
CWE-119 08/10/2025
TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow
A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-11005
Crítica · 9.8
CWE-78 25/09/2025
TOTOLINK X6000R Unauthenticated Command Injection Vulnerability
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458_B20250708.
CVE-2025-52905
Alta · 7.5
CWE-20 23/09/2025
TOTOLINK X6000R Argument Injection Vulnerability
Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360_B20241207.