Vulnerabilidades en TOTOLINK
557 resultadosCVE-2026-10138CRITICALA OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421EPSS 1.4%CVE-2025-8244HIGHTOTOLINK X15 HTTP POST Request formMapDelDevice buffer overflowEPSS 1.4%CVE-2024-8573HIGHTOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflowEPSS 1.4%CVE-2024-1001HIGHTotolink N200RE cstecgi.cgi main stack-based overflowEPSS 1.4%CVE-2024-0998HIGHTotolink N200RE cstecgi.cgi setDiagnosisCfg stack-based overflowEPSS 1.4%CVE-2026-10135CRITICALA OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). EPSS 1.4%CVE-2026-10131CRITICALAn OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20EPSS 1.4%CVE-2025-3668MEDIUMTOTOLINK A3700R cstecgi.cgi setScheduleCfg access controlEPSS 1.4%CVE-2024-8579HIGHTOTOLINK AC1200 T8 cstecgi.cgi setWiFiRepeaterCfg buffer overflowEPSS 1.3%CVE-2024-7465HIGHTOTOLINK CP450 cstecgi.cgi loginauth buffer overflowEPSS 1.3%CVE-2024-7462HIGHTOTOLINK N350RT cstecgi.cgi setWizardCfg buffer overflowEPSS 1.3%CVE-2025-5600CRITICALTOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflowEPSS 1.3%CVE-2025-6146HIGHTOTOLINK X15 HTTP POST Request formSysLog buffer overflowEPSS 1.3%CVE-2024-8580CRITICALTOTOLINK AC1200 T8 shadow.sample hard-coded passwordEPSS 1.3%CVE-2024-0572HIGHTotolink LR1200GB cstecgi.cgi setOpModeCfg stack-based overflowEPSS 1.3%CVE-2024-0571HIGHTotolink LR1200GB cstecgi.cgi setSmsCfg stack-based overflowEPSS 1.3%CVE-2023-7222HIGHTotolink X2000R HTTP POST Request boa formTmultiAP buffer overflowEPSS 1.3%CVE-2025-8242HIGHTOTOLINK X15 HTTP POST Request formFilter buffer overflowEPSS 1.3%CVE-2026-5691MEDIUMTotolink A7100RU cstecgi.cgi setFirewallType os command injectionEPSS 1.3%CVE-2025-8170HIGHTOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflowEPSS 1.3%