Totolink

A720r Firmware

24 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-9303

Exploit
  • EPSS 0.23%
  • Veröffentlicht 21.08.2025 14:32:07
  • Zuletzt bearbeitet 06.10.2025 18:48:16

A security flaw has been discovered in TOTOLINK A720R 4.1.5cu.630_B20250509. This issue affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument desc results in buffer overflow. The attack is pos...

5.3

CVE-2025-4271

Exploit
  • EPSS 0.05%
  • Veröffentlicht 05.05.2025 08:00:08
  • Zuletzt bearbeitet 07.05.2025 16:38:36

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSy...

7.5

CVE-2025-4270

Exploit
  • EPSS 0.12%
  • Veröffentlicht 05.05.2025 07:31:07
  • Zuletzt bearbeitet 07.05.2025 16:38:30

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been classified as problematic. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi of the component Config Handler. The manipulation of the argument topicurl with the input...

5.3

CVE-2025-4269

Exploit
  • EPSS 0.1%
  • Veröffentlicht 05.05.2025 07:15:48
  • Zuletzt bearbeitet 07.05.2025 16:38:25

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi of the component Log Handler. The manipulation of the argument topicurl with the input cle...

5.3

CVE-2025-4268

Exploit
  • EPSS 0.19%
  • Veröffentlicht 05.05.2025 06:31:07
  • Zuletzt bearbeitet 07.05.2025 16:38:18

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing ...

8.1

CVE-2024-8869

  • EPSS 0.44%
  • Veröffentlicht 15.09.2024 11:15:13
  • Zuletzt bearbeitet 20.09.2024 16:59:22

A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5. Affected is the function exportOvpn. The manipulation leads to os command injection. It is possible to launch the attack remotely. The complexity of an attack is rather hi...

9.8

CVE-2023-23064

  • EPSS 0.11%
  • Veröffentlicht 17.02.2023 22:15:14
  • Zuletzt bearbeitet 18.03.2025 20:15:17

TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control.

7.2

CVE-2022-38535

Exploit
  • EPSS 3.51%
  • Veröffentlicht 15.09.2022 18:15:12
  • Zuletzt bearbeitet 21.11.2024 07:16:37

TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg function.

7.2

CVE-2022-38534

Exploit
  • EPSS 3.51%
  • Veröffentlicht 15.09.2022 18:15:12
  • Zuletzt bearbeitet 21.11.2024 07:16:37

TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setdiagnosicfg function.

7.8

CVE-2022-36610

Exploit
  • EPSS 0.06%
  • Veröffentlicht 29.08.2022 00:15:08
  • Zuletzt bearbeitet 21.11.2024 07:13:24

TOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample.