A3700r Firmware (Totolink) - vulnerabilities (CVEs)

43 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2026-01-19. Vendor: Totolink.

CVEs of A3700r Firmware

CVE-2026-1143 - CVSS 8.8 (high), 2026-01-19: A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513. This affects the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi.…
CVE-2025-3675 - CVSS 6.9 (medium), 2025-04-16: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been rated as critical. Affected by this issue is the function setL2tpServerCfg of…
CVE-2025-3674 - CVSS 6.9 (medium), 2025-04-16: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been declared as critical. Affected by this vulnerability is the function…
CVE-2025-3668 - CVSS 6.9 (medium), 2025-04-16: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been declared as critical. This vulnerability affects the function setScheduleCfg…
CVE-2025-3667 - CVSS 6.9 (medium), 2025-04-16: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been classified as critical. This affects the function setUPnPCfg of the file…
CVE-2025-3666 - CVSS 6.9 (medium), 2025-04-16: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical. Affected by this issue is the function setDdnsCfg of the file…
CVE-2025-3665 - CVSS 6.9 (medium), 2025-04-16: A vulnerability has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical. Affected by this vulnerability is the function…
CVE-2025-3664 - CVSS 6.9 (medium), 2025-04-16: A vulnerability, which was classified as critical, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is the function setWiFiEasyGuestCfg of the…
CVE-2025-3663 - CVSS 8.2 (high), 2025-04-16: A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. This issue affects the function…
CVE-2024-42545 - CVSS 9.8 (critical), 2024-08-12: TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the ssid parameter in setWizardCfg function.
CVE-2024-42543 - CVSS 9.8 (critical), 2024-08-12: TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the http_host parameter in the loginauth function.
CVE-2024-7160 - CVSS 8.8 (high), 2024-07-28: A vulnerability classified as critical has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is the function setWanCfg of the file…
CVE-2024-7156 - CVSS 7.5 (high), 2024-07-28: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as problematic. Affected by this issue is some unknown functionality of the…
CVE-2024-7154 - CVSS 7.5 (high), 2024-07-28: A vulnerability, which was classified as problematic, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is an unknown function of the file…
CVE-2024-37640 - CVSS 8.8 (high), 2024-06-14: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWiFiEasyGuestCfg.
CVE-2024-37639 - CVSS 8.8 (high), 2024-06-14: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via eport in the function setIpPortFilterRules.
CVE-2024-37637 - CVSS 9.8 (critical), 2024-06-14: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWizardCfg.
CVE-2024-37632 - CVSS 9.8 (critical), 2024-06-13: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth .
CVE-2024-37635 - CVSS 9.8 (critical), 2024-06-13: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg
CVE-2024-37631 - CVSS 8.8 (high), 2024-06-13: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the File parameter in function UploadCustomModule.
CVE-2024-37634 - CVSS 9.8 (critical), 2024-06-13: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg.
CVE-2024-37633 - CVSS 8.8 (high), 2024-06-13: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiGuestCfg
CVE-2024-22662 - CVSS 9.8 (critical), 2024-01-23: TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRules
CVE-2024-22660 - CVSS 9.8 (critical), 2024-01-23: TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCfg
CVE-2024-22663 - CVSS 9.8 (critical), 2024-01-23: TOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection vulnerability via setOpModeCfg
CVE-2023-52029 - CVSS 9.8 (critical), 2024-01-11: TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setDiagnosisCfg function.
CVE-2023-52028 - CVSS 9.8 (critical), 2024-01-11: TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setTracerouteCfg function.
CVE-2023-52031 - CVSS 9.8 (critical), 2024-01-11: TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the UploadFirmwareFile function.
CVE-2023-52027 - CVSS 9.8 (critical), 2024-01-11: TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the NTPSyncWithHost function.
CVE-2023-52030 - CVSS 9.8 (critical), 2024-01-11: TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setOpModeCfg function.
CVE-2023-50147 - CVSS 9.8 (critical), 2023-12-22: There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlink A3700R router device in its firmware…
CVE-2023-48192 - CVSS 7.8 (high), 2023-11-20: An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function.
CVE-2023-46574 - CVSS 9.8 (critical), 2023-10-25: An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile…
CVE-2023-43141 - CVSS 9.8 (critical), 2023-09-25: TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control.
CVE-2022-36461 - CVSS 7.8 (high), 2022-08-25: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.
CVE-2022-36464 - CVSS 7.8 (high), 2022-08-25: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.
CVE-2022-36460 - CVSS 7.8 (high), 2022-08-25: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the function…
CVE-2022-36463 - CVSS 7.8 (high), 2022-08-25: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.
CVE-2022-36466 - CVSS 7.8 (high), 2022-08-25: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg.
CVE-2022-36459 - CVSS 7.8 (high), 2022-08-25: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost.
CVE-2022-36462 - CVSS 7.8 (high), 2022-08-25: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.
CVE-2022-36465 - CVSS 7.8 (high), 2022-08-25: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter.
CVE-2022-36458 - CVSS 7.8 (high), 2022-08-25: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg.