CVE-2025-28037
- EPSS 3.85%
- Veröffentlicht 22.04.2025 00:00:00
- Zuletzt bearbeitet 29.04.2025 16:03:42
TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the setDiagnosisCfg function through the ipDomain parameter.
CVE-2025-28027
- EPSS 0.15%
- Veröffentlicht 22.04.2025 00:00:00
- Zuletzt bearbeitet 07.05.2025 16:27:45
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow vulnerability in downloadFile.cgi.
CVE-2025-28029
- EPSS 0.15%
- Veröffentlicht 22.04.2025 00:00:00
- Zuletzt bearbeitet 07.05.2025 16:28:29
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in cstecgi.cgi
CVE-2025-28036
- EPSS 3.25%
- Veröffentlicht 22.04.2025 00:00:00
- Zuletzt bearbeitet 29.04.2025 16:13:29
TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
CVE-2025-28026
- EPSS 0.15%
- Veröffentlicht 22.04.2025 00:00:00
- Zuletzt bearbeitet 07.05.2025 16:28:08
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi.