A3600r Firmware (Totolink) - vulnerabilities (CVEs)
25 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-04-01. Vendor: Totolink.
CVEs of A3600r Firmware
- CVE-2026-31027 - CVSS 9.8 (critical), 2026-04-01: TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so. The vulnerability…
- CVE-2026-5020 - CVSS 9.8 (critical), 2026-03-29: A vulnerability was detected in Totolink A3600R 4.1.2cu.5182_B20201102. Affected by this issue is the function setNoticeCfg of the file /cgi-bin/cstecgi.cgi…
- CVE-2026-1686 - CVSS 8.8 (high), 2026-01-30: A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library…
- CVE-2024-7187 - CVSS 8.8 (high), 2024-07-29: A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been declared as critical. This vulnerability affects the function…
- CVE-2024-7186 - CVSS 8.8 (high), 2024-07-29: A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been classified as critical. This affects the function setWiFiAclAddConfig of the…
- CVE-2024-7185 - CVSS 8.8 (high), 2024-07-29: A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102 and classified as critical. Affected by this issue is the function setWebWlanIdx of the…
- CVE-2024-7184 - CVSS 8.8 (high), 2024-07-29: A vulnerability has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102 and classified as critical. Affected by this vulnerability is the function…
- CVE-2024-7183 - CVSS 8.8 (high), 2024-07-29: A vulnerability, which was classified as critical, was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected is the function setUploadSetting of the file…
- CVE-2024-7182 - CVSS 8.8 (high), 2024-07-29: A vulnerability, which was classified as critical, has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. This issue affects the function setUpgradeFW of…
- CVE-2024-7181 - CVSS 8.8 (high), 2024-07-29: A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. This vulnerability affects the function setTelnetCfg of the file…
- CVE-2024-7180 - CVSS 8.8 (high), 2024-07-29: A vulnerability classified as critical has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. This affects the function setPortForwardRules of the file…
- CVE-2024-7179 - CVSS 8.8 (high), 2024-07-29: A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been rated as critical. Affected by this issue is the function setParentalRules of…
- CVE-2024-7178 - CVSS 8.8 (high), 2024-07-29: A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been declared as critical. Affected by this vulnerability is the function…
- CVE-2024-7177 - CVSS 8.8 (high), 2024-07-29: A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been classified as critical. Affected is the function setLanguageCfg of the file…
- CVE-2024-7176 - CVSS 8.8 (high), 2024-07-29: A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102 and classified as critical. This issue affects the function setIpQosRules of the file…
- CVE-2024-7175 - CVSS 8.8 (high), 2024-07-29: A vulnerability has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102 and classified as critical. This vulnerability affects the function setDiagnosisCfg…
- CVE-2024-7174 - CVSS 8.8 (high), 2024-07-29: A vulnerability, which was classified as critical, was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. This affects the function setdeviceName of the file…
- CVE-2024-7173 - CVSS 8.8 (high), 2024-07-29: A vulnerability, which was classified as critical, has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected by this issue is the function loginauth…
- CVE-2024-7172 - CVSS 8.8 (high), 2024-07-28: A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected by this vulnerability is the function getSaveConfig of…
- CVE-2024-7171 - CVSS 8.8 (high), 2024-07-28: A vulnerability classified as critical has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected is the function NTPSyncWithHost of the file…
- CVE-2024-7159 - CVSS 8.8 (high), 2024-07-28: A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been rated as critical. This issue affects some unknown processing of the file…
- CVE-2022-36455 - CVSS 7.8 (high), 2022-08-25: TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi.
- CVE-2022-34993 - CVSS 9.8 (critical), 2022-08-04: Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample.
- CVE-2022-29377 - CVSS 7.5 (high), 2022-05-24: Totolink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows…
- CVE-2022-25078 - CVSS 9.8 (critical), 2022-02-24: TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows…
