Totolink

A950rg Firmware

27 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-44655

  • EPSS 0.35%
  • Published 21.07.2025 00:00:00
  • Last modified 07.08.2025 17:58:19

In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for inter...

9.8

CVE-2025-4496

  • EPSS 0.26%
  • Published 10.05.2025 05:00:10
  • Last modified 29.07.2025 14:42:19

A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The man...

9.8

CVE-2025-45798

Exploit
  • EPSS 0.42%
  • Published 08.05.2025 20:15:30
  • Last modified 19.05.2025 15:08:18

A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112. The vulnerability is located in the setNoticeCfg interface within the /lib/cste_modules/system.so library, specifically in the processing of the IpTo parameter.

9.8

CVE-2025-45797

Exploit
  • EPSS 0.34%
  • Published 08.05.2025 20:15:30
  • Last modified 16.05.2025 15:36:45

TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cste_modules/system.so.

9.8

CVE-2025-45800

Exploit
  • EPSS 0.68%
  • Published 02.05.2025 00:00:00
  • Last modified 04.06.2025 17:26:02

TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/global.so library, specifically in the processing of the deviceMac parameter.

7.3

CVE-2025-28025

Exploit
  • EPSS 0.15%
  • Published 23.04.2025 17:16:53
  • Last modified 06.05.2025 20:09:50

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.

7.3

CVE-2025-28028

Exploit
  • EPSS 0.15%
  • Published 23.04.2025 00:00:00
  • Last modified 06.05.2025 20:08:42

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v5 parameter.

7.3

CVE-2025-28033

Exploit
  • EPSS 0.15%
  • Published 22.04.2025 14:15:25
  • Last modified 29.04.2025 16:19:19

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vu...

7.3

CVE-2025-28026

Exploit
  • EPSS 0.15%
  • Published 22.04.2025 00:00:00
  • Last modified 07.05.2025 16:28:08

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi.

7.3

CVE-2025-28032

Exploit
  • EPSS 0.26%
  • Published 22.04.2025 00:00:00
  • Last modified 29.04.2025 16:19:28

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in...