Totolink

A950rg

22 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-45798

Exploit
  • EPSS 1.02%
  • Veröffentlicht 08.05.2025 20:15:30
  • Zuletzt bearbeitet 19.05.2025 15:08:18

A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112. The vulnerability is located in the setNoticeCfg interface within the /lib/cste_modules/system.so library, specifically in the processing of the IpTo parameter.

9.8

CVE-2025-45800

Exploit
  • EPSS 0.73%
  • Veröffentlicht 02.05.2025 00:00:00
  • Zuletzt bearbeitet 04.06.2025 17:26:02

TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/global.so library, specifically in the processing of the deviceMac parameter.

7.3

CVE-2025-28025

Exploit
  • EPSS 0.33%
  • Veröffentlicht 23.04.2025 17:16:53
  • Zuletzt bearbeitet 06.05.2025 20:09:50

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.

7.3

CVE-2025-28028

Exploit
  • EPSS 0.33%
  • Veröffentlicht 23.04.2025 00:00:00
  • Zuletzt bearbeitet 06.05.2025 20:08:42

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v5 parameter.

7.3

CVE-2025-28033

Exploit
  • EPSS 0.33%
  • Veröffentlicht 22.04.2025 14:15:25
  • Zuletzt bearbeitet 29.04.2025 16:19:19

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vu...

7.3

CVE-2025-28032

Exploit
  • EPSS 0.28%
  • Veröffentlicht 22.04.2025 00:00:00
  • Zuletzt bearbeitet 29.04.2025 16:19:28

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in...

7.3

CVE-2025-28026

Exploit
  • EPSS 0.33%
  • Veröffentlicht 22.04.2025 00:00:00
  • Zuletzt bearbeitet 07.05.2025 16:28:08

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi.

9.8

CVE-2025-28036

Exploit
  • EPSS 1.05%
  • Veröffentlicht 22.04.2025 00:00:00
  • Zuletzt bearbeitet 29.04.2025 16:13:29

TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

7.3

CVE-2025-28029

Exploit
  • EPSS 0.33%
  • Veröffentlicht 22.04.2025 00:00:00
  • Zuletzt bearbeitet 07.05.2025 16:28:29

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in cstecgi.cgi

7.3

CVE-2025-28027

Exploit
  • EPSS 0.33%
  • Veröffentlicht 22.04.2025 00:00:00
  • Zuletzt bearbeitet 07.05.2025 16:27:45

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow vulnerability in downloadFile.cgi.