Totolink

A3300r

39 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2026-31170

Exploit
  • EPSS 0.45%
  • Veröffentlicht 09.04.2026 19:16:23
  • Zuletzt bearbeitet 22.04.2026 16:43:08

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun-pass parameter to /cgi-bin/cstecgi.cgi.

5.5

CVE-2026-5679

Exploit
  • EPSS 0.5%
  • Veröffentlicht 06.04.2026 19:00:19
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_B20221024. The impacted element is the function vsetTr069Cfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument stun_pass leads to os command injection. The ex...

8.8

CVE-2026-5178

Exploit
  • EPSS 0.69%
  • Veröffentlicht 31.03.2026 03:00:14
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this issue is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument vlanPriLan3 leads to command injection. Remote ...

8.8

CVE-2026-5177

Exploit
  • EPSS 0.69%
  • Veröffentlicht 31.03.2026 02:00:21
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this vulnerability is the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument rxRate can lead to command injection. ...

9.8

CVE-2026-5176

Exploit
  • EPSS 2.18%
  • Veröffentlicht 31.03.2026 01:15:13
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. Affected is the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument provided results in command injection. The attack may be ...

8.8

CVE-2026-5105

Exploit
  • EPSS 2.67%
  • Veröffentlicht 30.03.2026 03:00:20
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was detected in Totolink A3300R 17.0.0cu.557_b20221024. The affected element is the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. Performing a manipulation of the argument pptpPassThru res...

8.8

CVE-2026-5104

Exploit
  • EPSS 2.67%
  • Veröffentlicht 30.03.2026 02:00:15
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Impacted is the function setStaticRoute of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ip leads to command injection. The attack may be perform...

8.8

CVE-2026-5103

Exploit
  • EPSS 2.67%
  • Veröffentlicht 30.03.2026 01:00:20
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024. This issue affects the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument enable causes command injection. The attack is possible to be car...

8.8

CVE-2026-5102

Exploit
  • EPSS 2.67%
  • Veröffentlicht 30.03.2026 00:00:20
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. This vulnerability affects the function setSmartQosCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. The manipulation of the argument qos_up_bw resu...

8.8

CVE-2026-5101

Exploit
  • EPSS 3.62%
  • Veröffentlicht 29.03.2026 23:00:15
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was identified in Totolink A3300R 17.0.0cu.557_b20221024. This affects the function setLanCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. The manipulation of the argument lanIp leads to command injection. Remo...