Totolink

A8000ru Firmware

28 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2026-7125

Exploit
  • EPSS 1.25%
  • Veröffentlicht 27.04.2026 12:45:12
  • Zuletzt bearbeitet 27.04.2026 18:36:42

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. Affected by this issue is the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument merge leads to os command in...

9.8

CVE-2026-7124

Exploit
  • EPSS 1.25%
  • Veröffentlicht 27.04.2026 12:30:15
  • Zuletzt bearbeitet 27.04.2026 18:36:42

A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. Affected by this vulnerability is the function setIpv6LanCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument addrPrefixLen...

9.8

CVE-2026-7123

Exploit
  • EPSS 1.25%
  • Veröffentlicht 27.04.2026 12:15:12
  • Zuletzt bearbeitet 27.04.2026 18:36:42

A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument setIptvCfg results in os command injection...

9.8

CVE-2026-7122

Exploit
  • EPSS 1.25%
  • Veröffentlicht 27.04.2026 12:00:14
  • Zuletzt bearbeitet 27.04.2026 18:36:42

A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This impacts the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument enable leads to os command injection. It is ...

9.8

CVE-2026-7121

Exploit
  • EPSS 1.25%
  • Veröffentlicht 27.04.2026 11:45:11
  • Zuletzt bearbeitet 27.04.2026 18:36:42

A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument wizard causes os command injection. It is possible ...

9.8

CVE-2026-7037

Exploit
  • EPSS 1.25%
  • Veröffentlicht 26.04.2026 11:45:15
  • Zuletzt bearbeitet 27.04.2026 18:50:06

A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument pptpPassThru results in os comm...

8

CVE-2024-28338

Exploit
  • EPSS 0.02%
  • Veröffentlicht 12.03.2024 17:15:59
  • Zuletzt bearbeitet 03.04.2025 13:16:47

A login bypass in TOTOLINK A8000RU V7.1cu.643_B20200521 allows attackers to login to Administrator accounts via providing a crafted session cookie.

9.8

CVE-2024-24324

Exploit
  • EPSS 0.1%
  • Veröffentlicht 30.01.2024 15:15:09
  • Zuletzt bearbeitet 21.11.2024 08:59:10

TOTOLINK A8000RU v7.1cu.643_B20200521 was discovered to contain a hardcoded password for root stored in /etc/shadow.