A3300r (Totolink) - vulnerabilities (CVEs)
5 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2025-10-27. Vendor: Totolink.
CVEs of A3300r
- CVE-2025-12241 - CVSS 8.8 (high), 2025-10-27: A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This impacts the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the…
- CVE-2025-12240 - CVSS 9.8 (critical), 2025-10-27: A security vulnerability has been detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi.…
- CVE-2025-12239 - CVSS 9.8 (critical), 2025-10-27: A weakness has been identified in TOTOLINK A3300R 17.0.0cu.557_B20221024. The impacted element is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi.…
- CVE-2024-7331 - CVSS 8.8 (high), 2024-08-01: A vulnerability was found in TOTOLINK A3300R 17.0.0cu.557_B20221024 and classified as critical. Affected by this issue is the function UploadCustomModule of…
- CVE-2024-7155 - CVSS 4.7 (medium), 2024-07-28: A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024 and classified as problematic. Affected by this vulnerability is an unknown…
- CVE-2024-24329 - CVSS 9.8 (critical), 2024-01-30: TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPortForwardRules…
- CVE-2023-37171 - CVSS 9.8 (critical), 2023-07-07: TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function.
- CVE-2023-37170 - CVSS 9.8 (critical), 2023-07-07: TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the lang parameter in the…
