A7100ru Firmware (Totolink) - vulnerabilities (CVEs)

77 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2026-04-13. Vendor: Totolink.

CVEs of A7100ru Firmware

CVE-2026-6195 - CVSS 9.8 (critical), 2026-04-13: A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setPasswordCfg of the file…
CVE-2026-6156 - CVSS 9.8 (critical), 2026-04-13: A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setIpQosRules of the file /cgi-bin/cstecgi.cgi…
CVE-2026-6155 - CVSS 9.8 (critical), 2026-04-13: A weakness has been identified in Totolink A7100RU 7.4cu.2313. The impacted element is the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the…
CVE-2026-6154 - CVSS 9.8 (critical), 2026-04-13: A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setWizardCfg of the file…
CVE-2026-6140 - CVSS 9.8 (critical), 2026-04-13: A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi of the…
CVE-2026-6139 - CVSS 9.8 (critical), 2026-04-13: A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the…
CVE-2026-6138 - CVSS 9.8 (critical), 2026-04-13: A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setAccessDeviceCfg of the file /cgi-bin/cstecgi.cgi of…
CVE-2026-6132 - CVSS 9.8 (critical), 2026-04-12: A vulnerability was determined in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setLedCfg of the file /cgi-bin/cstecgi.cgi of…
CVE-2026-6131 - CVSS 9.8 (critical), 2026-04-12: A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setTracerouteCfg of the file…
CVE-2026-6116 - CVSS 9.8 (critical), 2026-04-12: A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setDiagnosisCfg of the file…
CVE-2026-6115 - CVSS 9.8 (critical), 2026-04-12: A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setAppCfg of the file /cgi-bin/cstecgi.cgi of the component CGI…
CVE-2026-6113 - CVSS 9.8 (critical), 2026-04-12: A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setTtyServiceCfg of the…
CVE-2026-6114 - CVSS 9.8 (critical), 2026-04-12: A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setNetworkCfg of the file /cgi-bin/cstecgi.cgi…
CVE-2026-6112 - CVSS 9.8 (critical), 2026-04-12: A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the…
CVE-2026-6029 - CVSS 9.8 (critical), 2026-04-10: A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setVpnAccountCfg of the file /cgi-bin/cstecgi.cgi…
CVE-2026-6028 - CVSS 9.8 (critical), 2026-04-10: A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setPptpServerCfg of the file…
CVE-2026-6027 - CVSS 9.8 (critical), 2026-04-10: A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of…
CVE-2026-6026 - CVSS 9.8 (critical), 2026-04-10: A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setPortalConfWeChat of the file…
CVE-2026-6025 - CVSS 9.8 (critical), 2026-04-10: A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi of the…
CVE-2026-5997 - CVSS 9.8 (critical), 2026-04-10: A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setLoginPasswordCfg of the file…
CVE-2026-5996 - CVSS 9.8 (critical), 2026-04-10: A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setAdvancedInfoShow of the file…
CVE-2026-5994 - CVSS 9.8 (critical), 2026-04-10: A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of…
CVE-2026-5995 - CVSS 9.8 (critical), 2026-04-10: A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setMiniuiHomeInfoShow of the file /cgi-bin/cstecgi.cgi of…
CVE-2026-5993 - CVSS 9.8 (critical), 2026-04-10: A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setWiFiGuestCfg of the file…
CVE-2026-5977 - CVSS 9.8 (critical), 2026-04-09: A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi of the…
CVE-2026-5978 - CVSS 9.8 (critical), 2026-04-09: A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi…
CVE-2026-5976 - CVSS 9.8 (critical), 2026-04-09: A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the…
CVE-2026-5975 - CVSS 9.8 (critical), 2026-04-09: A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of…
CVE-2026-5854 - CVSS 9.8 (critical), 2026-04-09: A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi…
CVE-2026-5853 - CVSS 9.8 (critical), 2026-04-09: A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setIpv6LanCfg of the file…
CVE-2026-5852 - CVSS 9.8 (critical), 2026-04-09: A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi of the component…
CVE-2026-5851 - CVSS 9.8 (critical), 2026-04-09: A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi of the…
CVE-2026-5850 - CVSS 9.8 (critical), 2026-04-09: A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the…
CVE-2026-5692 - CVSS 7.3 (high), 2026-04-07: A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setGameSpeedCfg of the file /cgi-bin/cstecgi.cgi. The…
CVE-2026-5691 - CVSS 7.3 (high), 2026-04-06: A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setFirewallType of the file /cgi-bin/cstecgi.cgi. The…
CVE-2026-5690 - CVSS 7.3 (high), 2026-04-06: A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setRemoteCfg of the file /cgi-bin/cstecgi.cgi. Executing…
CVE-2026-5689 - CVSS 7.3 (high), 2026-04-06: A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setNtpCfg of the file /cgi-bin/cstecgi.cgi.…
CVE-2026-5688 - CVSS 7.3 (high), 2026-04-06: A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi.…
CVE-2026-5678 - CVSS 7.3 (high), 2026-04-06: A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi.…
CVE-2026-5677 - CVSS 7.3 (high), 2026-04-06: A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function CsteSystem of the file /cgi-bin/cstecgi.cgi. Performing…
CVE-2025-44655 - CVSS 9.8 (critical), 2025-07-21: In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf. This could lead to unauthorized access to…
CVE-2023-7095 - CVSS 9.8 (critical), 2023-12-25: A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024. Affected by this issue is the function main of the…
CVE-2023-6906 - CVSS 9.8 (critical), 2023-12-18: A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_B20191024. Affected is the function main of the file…
CVE-2023-33556 - CVSS 9.8 (critical), 2023-06-07: TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg.
CVE-2023-30054 - CVSS 9.8 (critical), 2023-05-05: TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability. An attacker can obtain a stable root shell through a specially constructed…
CVE-2023-30053 - CVSS 9.8 (critical), 2023-05-05: TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.
CVE-2023-26978 - CVSS 9.8 (critical), 2023-04-07: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIeCfg.
CVE-2023-26848 - CVSS 9.8 (critical), 2023-04-07: TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules.
CVE-2023-27232 - CVSS 9.8 (critical), 2023-03-28: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting/setWanIeCfg.
CVE-2023-27231 - CVSS 9.8 (critical), 2023-03-28: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWanIeCfg.
CVE-2023-27229 - CVSS 9.8 (critical), 2023-03-28: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg.
CVE-2023-27135 - CVSS 9.8 (critical), 2023-03-23: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg.
CVE-2023-25395 - CVSS 9.8 (critical), 2023-03-08: TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticDhcpRules.
CVE-2023-24184 - CVSS 9.8 (critical), 2023-02-21: TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability.
CVE-2023-24238 - CVSS 9.8 (critical), 2023-02-16: TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parameter at setting/delStaticDhcpRules.
CVE-2023-24236 - CVSS 9.8 (critical), 2023-02-16: TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules.
CVE-2023-24276 - CVSS 9.8 (critical), 2023-02-06: TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules.
CVE-2022-48126 - CVSS 9.8 (critical), 2023-01-20: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the…
CVE-2022-48125 - CVSS 9.8 (critical), 2023-01-20: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password parameter in the…
CVE-2022-48124 - CVSS 9.8 (critical), 2023-01-20: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the…
CVE-2022-48123 - CVSS 9.8 (critical), 2023-01-20: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the…
CVE-2022-48122 - CVSS 9.8 (critical), 2023-01-20: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the dayvalid parameter in the…
CVE-2022-48121 - CVSS 9.8 (critical), 2023-01-20: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/delStaticDhcpRules…
CVE-2022-47853 - CVSS 9.8 (critical), 2023-01-17: TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service. An attacker can obtain a stable root shell…
CVE-2022-46634 - CVSS 9.8 (critical), 2022-12-15: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the setting/setWiFiWpsCfg…
CVE-2022-46631 - CVSS 9.8 (critical), 2022-12-15: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the…
CVE-2022-44843 - CVSS 9.8 (critical), 2022-11-25: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg…
CVE-2022-44844 - CVSS 9.8 (critical), 2022-11-25: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function.
CVE-2022-28575 - CVSS 9.8 (critical), 2022-05-05: It is found that there is a command injection vulnerability in the setopenvpnclientcfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which…
CVE-2022-28579 - CVSS 9.8 (critical), 2022-05-05: It is found that there is a command injection vulnerability in the setParentalRules interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows…
CVE-2022-28582 - CVSS 9.8 (critical), 2022-05-05: It is found that there is a command injection vulnerability in the setWiFiSignalCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows…
CVE-2022-28578 - CVSS 9.8 (critical), 2022-05-05: It is found that there is a command injection vulnerability in the setOpenVpnCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an…
CVE-2022-28581 - CVSS 9.8 (critical), 2022-05-05: It is found that there is a command injection vulnerability in the setWiFiAdvancedCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which…
CVE-2022-28584 - CVSS 9.8 (critical), 2022-05-05: It is found that there is a command injection vulnerability in the setWiFiWpsStart interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows…
CVE-2022-28577 - CVSS 9.8 (critical), 2022-05-05: It is found that there is a command injection vulnerability in the delParentalRules interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows…
CVE-2022-28580 - CVSS 9.8 (critical), 2022-05-05: It is found that there is a command injection vulnerability in the setL2tpServerCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows…
CVE-2022-28583 - CVSS 9.8 (critical), 2022-05-05: It is found that there is a command injection vulnerability in the setWiFiWpsCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an…