Totolink

A720r Firmware

24 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-9303

Exploit
  • EPSS 0.23%
  • Published 21.08.2025 14:32:07
  • Last modified 06.10.2025 18:48:16

A security flaw has been discovered in TOTOLINK A720R 4.1.5cu.630_B20250509. This issue affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument desc results in buffer overflow. The attack is pos...

5.3

CVE-2025-4271

Exploit
  • EPSS 0.05%
  • Published 05.05.2025 08:00:08
  • Last modified 07.05.2025 16:38:36

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSy...

7.5

CVE-2025-4270

Exploit
  • EPSS 0.12%
  • Published 05.05.2025 07:31:07
  • Last modified 07.05.2025 16:38:30

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been classified as problematic. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi of the component Config Handler. The manipulation of the argument topicurl with the input...

5.3

CVE-2025-4269

Exploit
  • EPSS 0.1%
  • Published 05.05.2025 07:15:48
  • Last modified 07.05.2025 16:38:25

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi of the component Log Handler. The manipulation of the argument topicurl with the input cle...

5.3

CVE-2025-4268

Exploit
  • EPSS 0.19%
  • Published 05.05.2025 06:31:07
  • Last modified 07.05.2025 16:38:18

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing ...

8.1

CVE-2024-8869

  • EPSS 0.44%
  • Published 15.09.2024 11:15:13
  • Last modified 20.09.2024 16:59:22

A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5. Affected is the function exportOvpn. The manipulation leads to os command injection. It is possible to launch the attack remotely. The complexity of an attack is rather hi...

9.8

CVE-2023-23064

  • EPSS 0.11%
  • Published 17.02.2023 22:15:14
  • Last modified 18.03.2025 20:15:17

TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control.

7.2

CVE-2022-38535

Exploit
  • EPSS 3.51%
  • Published 15.09.2022 18:15:12
  • Last modified 21.11.2024 07:16:37

TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg function.

7.2

CVE-2022-38534

Exploit
  • EPSS 3.51%
  • Published 15.09.2022 18:15:12
  • Last modified 21.11.2024 07:16:37

TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setdiagnosicfg function.

7.8

CVE-2022-36610

Exploit
  • EPSS 0.06%
  • Published 29.08.2022 00:15:08
  • Last modified 21.11.2024 07:13:24

TOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample.