A720r Firmware (Totolink) - vulnerabilities (CVEs)

29 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2026-08-30. Vendor: Totolink.

CVEs of A720r Firmware

CVE-2026-82539 - CVSS 9.4 (critical), 2026-08-30: A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component…
CVE-2025-60682 - CVSS 6.5 (medium), 2025-11-13: A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the cloudupdate_check binary, specifically in the…
CVE-2025-60686 - CVSS 5.1 (medium), 2025-11-13: A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers (A720R V4.1.5cu.614_B20230630,…
CVE-2025-60685 - CVSS 5.1 (medium), 2025-11-13: A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary (sub_401EE0 function). The binary reads…
CVE-2025-60683 - CVSS 6.5 (medium), 2025-11-13: A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary, specifically in the…
CVE-2025-9303 - CVSS 9.8 (critical), 2025-08-21: A security flaw has been discovered in TOTOLINK A720R 4.1.5cu.630_B20250509. This issue affects the function setParentalRules of the file…
CVE-2025-4270 - CVSS 7.5 (high), 2025-05-05: A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been classified as problematic. Affected is an unknown function of the file…
CVE-2025-4271 - CVSS 6.9 (medium), 2025-05-05: A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of…
CVE-2025-4269 - CVSS 6.9 (medium), 2025-05-05: A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This issue affects some unknown processing of the file…
CVE-2025-4268 - CVSS 6.9 (medium), 2025-05-05: A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file…
CVE-2024-8869 - CVSS 8.1 (high), 2024-09-15: A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5. Affected is the function exportOvpn. The manipulation leads to os command…
CVE-2023-23064 - CVSS 9.8 (critical), 2023-02-17: TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control.
CVE-2022-38535 - CVSS 7.2 (high), 2022-09-15: TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg function.
CVE-2022-38534 - CVSS 7.2 (high), 2022-09-15: TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setdiagnosicfg function.
CVE-2022-36610 - CVSS 7.8 (high), 2022-08-29: TOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
CVE-2022-36456 - CVSS 7.8 (high), 2022-08-25: TOTOLink A720R V4.1.5cu.532_B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi.
CVE-2021-43662 - CVSS 6.5 (medium), 2022-03-31: totolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue which causes uncontrolled resource consumption.
CVE-2021-45737 - CVSS 7.5 (high), 2022-02-04: TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a…
CVE-2021-45742 - CVSS 9.8 (critical), 2022-02-04: TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers…
CVE-2021-45740 - CVSS 9.8 (critical), 2022-02-04: TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function. This vulnerability allows attackers to cause…
CVE-2021-45739 - CVSS 7.5 (high), 2022-02-04: TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a…
CVE-2021-44247 - CVSS 9.8 (critical), 2022-02-04: Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection…
CVE-2021-44246 - CVSS 7.5 (high), 2022-02-04: Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in…
CVE-2021-35327 - CVSS 9.8 (critical), 2021-08-05: A vulnerability in TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to start the Telnet service, then login with the default credentials…
CVE-2021-35326 - CVSS 7.5 (high), 2021-08-05: A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows attackers to download the configuration file via sending a crafted HTTP…
CVE-2021-35325 - CVSS 7.5 (high), 2021-08-05: A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to cause a denial of service (DOS).
CVE-2021-35324 - CVSS 9.8 (critical), 2021-08-05: A vulnerability in the Form_Login function of TOTOLINK A720R A720R_Firmware V4.1.5cu.470_B20200911 allows attackers to bypass authentication.
CVE-2021-27710 - CVSS 9.8 (critical), 2021-04-14: Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote…
CVE-2021-27708 - CVSS 9.8 (critical), 2021-04-14: Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote…