A810r Firmware (Totolink) - vulnerabilities (CVEs)

29 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2025-05-10. Vendor: Totolink.

CVEs of A810r Firmware

• CVE-2025-4496 - CVSS 9.8 (critical), 2025-05-10: A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This…
• CVE-2025-28022 - CVSS 7.3 (high), 2025-04-23: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.
• CVE-2025-28021 - CVSS 7.3 (high), 2025-04-23: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the downloadFile.cgi through the v14 and v3 parameters
• CVE-2025-28035 - CVSS 9.8 (critical), 2025-04-22: TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the…
• CVE-2025-28036 - CVSS 9.8 (critical), 2025-04-22: TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the…
• CVE-2025-28030 - CVSS 8.8 (high), 2025-04-22: TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a stack overflow via the startTime and endTime parameters in setParentalRules function.
• CVE-2025-28037 - CVSS 9.8 (critical), 2025-04-22: TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the…
• CVE-2025-28031 - CVSS 6.5 (medium), 2025-04-22: TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini.
• CVE-2025-28024 - CVSS 9.8 (critical), 2025-04-22: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgi
• CVE-2025-28033 - CVSS 7.3 (high), 2025-04-22: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU…
• CVE-2025-28032 - CVSS 7.3 (high), 2025-04-22: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU…
• CVE-2025-28034 - CVSS 9.8 (critical), 2025-04-22: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU…
• CVE-2025-28137 - CVSS 9.8 (critical), 2025-04-15: The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the…
• CVE-2025-28135 - CVSS 7.5 (high), 2025-03-27: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi.
• CVE-2024-57036 - CVSS 8.1 (high), 2025-01-21: TOTOLINK A810R V4.1.2cu.5032_B20200407 was found to contain a command insertion vulnerability in downloadFile.cgi main function. This vulnerability allows an…
• CVE-2024-53335 - CVSS 7.8 (high), 2024-11-21: TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in downloadFlile.cgi.
• CVE-2024-53334 - CVSS 8.8 (high), 2024-11-21: TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in infostat.cgi.
• CVE-2022-38511 - CVSS 7.8 (high), 2022-08-29: TOTOLINK A810R V5.9c.4050_B20190424 was discovered to contain a command injection vulnerability via the component downloadFile.cgi.
• CVE-2022-36616 - CVSS 7.8 (high), 2022-08-29: TOTOLINK A810R V4.1.2cu.5182_B20201026 and V5.9c.4050_B20190424 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
• CVE-2022-28935 - CVSS 7.2 (high), 2022-07-06: Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730,…
• CVE-2022-26207 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-26210 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-26214 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-26206 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-26209 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-26212 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-26208 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-26211 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-25079 - CVSS 9.8 (critical), 2022-02-24: TOTOLink A810R V4.1.2cu.5182_B20201026 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers…