A6000r Firmware (Totolink) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-04-04. Vendor: Totolink.
CVEs of A6000r Firmware
- CVE-2025-3249 - CVSS 9.8 (critical), 2025-04-04: A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability is the function apcli_cancel_wps of…
- CVE-2024-57214 - CVSS 6.3 (medium), 2025-01-10: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.
- CVE-2024-57213 - CVSS 6.3 (medium), 2025-01-10: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the action_passwd function.
- CVE-2024-57212 - CVSS 5.1 (medium), 2025-01-10: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the action_reboot function.
- CVE-2024-57211 - CVSS 8 (high), 2025-01-10: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function.
- CVE-2024-41319 - CVSS 9.8 (critical), 2024-07-23: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the cmd parameter in the webcmd function.
- CVE-2024-41316 - CVSS 9.8 (critical), 2024-07-22: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function.
- CVE-2024-41320 - CVSS 8.8 (high), 2024-07-22: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the get_apcli_conn_info function.
- CVE-2024-41315 - CVSS 6.8 (medium), 2024-07-22: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function.
- CVE-2024-41318 - CVSS 9.8 (critical), 2024-07-22: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode…
- CVE-2024-41314 - CVSS 6.8 (medium), 2024-07-22: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function.
- CVE-2024-41317 - CVSS 8 (high), 2024-07-22: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function.
- CVE-2024-37626 - CVSS 8.8 (high), 2024-06-20: A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the…
