A3100r Firmware (Totolink) - vulnerabilities (CVEs)

47 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2025-05-10. Vendor: Totolink.

CVEs of A3100r Firmware

CVE-2025-4496 - CVSS 9.8 (critical), 2025-05-10: A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This…
CVE-2025-45790 - CVSS 9.8 (critical), 2025-05-08: TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cste_modules/firewall.so.
CVE-2025-45789 - CVSS 9.8 (critical), 2025-05-08: TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules.
CVE-2025-45788 - CVSS 9.8 (critical), 2025-05-08: TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules.
CVE-2025-45787 - CVSS 9.8 (critical), 2025-05-08: TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules.
CVE-2025-28028 - CVSS 7.3 (high), 2025-04-23: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain…
CVE-2025-28025 - CVSS 7.3 (high), 2025-04-23: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain…
CVE-2025-28035 - CVSS 9.8 (critical), 2025-04-22: TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the…
CVE-2025-28029 - CVSS 7.3 (high), 2025-04-22: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain…
CVE-2025-28036 - CVSS 9.8 (critical), 2025-04-22: TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the…
CVE-2025-28026 - CVSS 7.3 (high), 2025-04-22: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain…
CVE-2025-28027 - CVSS 7.3 (high), 2025-04-22: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain…
CVE-2025-28032 - CVSS 7.3 (high), 2025-04-22: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU…
CVE-2025-28034 - CVSS 9.8 (critical), 2025-04-22: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU…
CVE-2025-28033 - CVSS 7.3 (high), 2025-04-22: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU…
CVE-2025-28256 - CVSS 9.8 (critical), 2025-03-28: An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file…
CVE-2024-42547 - CVSS 9.8 (critical), 2024-08-12: TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the http_host parameter in the loginauth function.
CVE-2024-42546 - CVSS 9.8 (critical), 2024-08-12: TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the password parameter in the loginauth function.
CVE-2024-7158 - CVSS 8.8 (high), 2024-07-28: A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504. It has been declared as critical. This vulnerability affects the function setTelnetCfg of…
CVE-2024-7157 - CVSS 8.8 (high), 2024-07-28: A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504. It has been classified as critical. This affects the function getSaveConfig of the file…
CVE-2024-36650 - CVSS 7.5 (high), 2024-06-11: TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file…
CVE-2022-28935 - CVSS 7.2 (high), 2022-07-06: Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730,…
CVE-2022-29638 - CVSS 7.5 (high), 2022-05-18: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function…
CVE-2022-29641 - CVSS 7.5 (high), 2022-05-18: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in…
CVE-2022-29644 - CVSS 9.8 (critical), 2022-05-18: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for the telnet service stored in the…
CVE-2022-29640 - CVSS 7.5 (high), 2022-05-18: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function…
CVE-2022-29643 - CVSS 7.5 (high), 2022-05-18: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function…
CVE-2022-29646 - CVSS 5.3 (medium), 2022-05-18: An access control issue in TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 allows attackers to obtain sensitive information via a crafted…
CVE-2022-29639 - CVSS 8.1 (high), 2022-05-18: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a command injection vulnerability via the magicid parameter in…
CVE-2022-29642 - CVSS 7.5 (high), 2022-05-18: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the url parameter in the function…
CVE-2022-29645 - CVSS 9.8 (critical), 2022-05-18: TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for root stored in the component…
CVE-2021-46008 - CVSS 8.8 (high), 2022-03-30: In totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official released firmware. An attacker, who has connected to the Wi-Fi,…
CVE-2021-46006 - CVSS 6.5 (medium), 2022-03-30: In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple…
CVE-2021-46010 - CVSS 8.8 (high), 2022-03-30: Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration. The SESSION_ID is predictable. An attacker can hijack a…
CVE-2021-46009 - CVSS 9.8 (critical), 2022-03-30: In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without…
CVE-2022-26208 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
CVE-2022-26211 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
CVE-2022-26207 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
CVE-2022-26210 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
CVE-2022-26214 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
CVE-2022-26206 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
CVE-2022-26209 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
CVE-2022-26212 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
CVE-2021-44620 - CVSS 9.8 (critical), 2022-03-11: A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime parameters.
CVE-2022-25077 - CVSS 9.8 (critical), 2022-02-24: TOTOLink A3100R V4.1.2cu.5050_B20200504 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows…
CVE-2021-44246 - CVSS 7.5 (high), 2022-02-04: Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in…
CVE-2021-44247 - CVSS 9.8 (critical), 2022-02-04: Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection…