Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,480

Export CSV
CVE-2025-28024

TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgi

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A810r A810r Firmware
CVE-2025-28032

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm parameter.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A3000ru A3000ru Firmware A3100r and 9 more
CVE-2025-28033

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpTo parameter.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A3000ru A3000ru Firmware A3100r and 9 more
CVE-2025-28034

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost function through the hostTime parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Totolink
Products
A3000ru A3000ru Firmware A3100r and 9 more
CVE-2025-28035

TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Totolink
Products
A3000ru A3000ru Firmware A3100r and 9 more
CVE-2025-28036

TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Totolink
Products
A3000ru A3000ru Firmware A3100r and 9 more
CVE-2025-28038

TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setWebWlanIdx function through the webWlanIdx parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Totolink
Products
Ex1200t Ex1200t Firmware
CVE-2025-28039

TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the FileName parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Totolink
Products
Ex1200t Ex1200t Firmware
CVE-2022-44844

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function.

CVSS 3.1 · 9.8 Critical EPSS 2.0% KEV · Not listed
Vendors
Totolink
Products
A7100ru A7100ru Firmware
CVE-2022-44843

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function.

CVSS 3.1 · 9.8 Critical EPSS 2.0% KEV · Not listed
Vendors
Totolink
Products
A7100ru A7100ru Firmware
CVE-2022-44252

TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the setUploadSetting function.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Totolink
Products
Lr350 Lr350 Firmware
CVE-2022-44251

TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the ussd parameter in the setUssd function.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Totolink
Products
Lr350 Lr350 Firmware
CVE-2022-44250

TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Totolink
Products
Lr350 Lr350 Firmware
CVE-2022-44249

TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the UploadFirmwareFile function.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Totolink
Products
Lr350 Lr350 Firmware
CVE-2022-44260

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter sPort/ePort in the setIpPortFilterRules function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
Lr350 Lr350 Firmware
CVE-2022-44259

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParentalRules function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
Lr350 Lr350 Firmware
CVE-2022-44258

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed
Vendors
Totolink
Products
Lr350 Lr350 Firmware
CVE-2022-44257

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter pppoeUser in the setOpModeCfg function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
Lr350 Lr350 Firmware
CVE-2022-44256

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
Nr1800x Nr1800x Firmware
CVE-2022-44255

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function via long post data.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
Lr350 Lr350 Firmware