CVE-2025-3249
- EPSS 0.92%
- Published 04.04.2025 14:00:15
- Last modified 28.05.2025 15:15:07
A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability is the function apcli_cancel_wps of the file /usr/lib/lua/luci/controller/mtkwifi.lua. The manipulation leads to command injectio...
CVE-2024-57213
- EPSS 1.65%
- Published 10.01.2025 17:15:18
- Last modified 03.04.2025 15:48:02
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the action_passwd function.
CVE-2024-57214
- EPSS 1.65%
- Published 10.01.2025 17:15:18
- Last modified 03.04.2025 15:47:53
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.
- EPSS 2.9%
- Published 10.01.2025 17:15:17
- Last modified 03.04.2025 15:48:09
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function.
CVE-2024-57212
- EPSS 1.43%
- Published 10.01.2025 17:15:17
- Last modified 03.04.2025 15:48:05
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the action_reboot function.