Vulnerabilidades em TOTOLINK

544 resultados
Análise Vexday

Com 269 CVEs catalogadas e nenhuma entrada no catálogo KEV da CISA, a TOTOLINK apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que não elimina o risco, mas indica ausência de exploração confirmada em larga escala no momento. O tipo de falha mais recorrente é CWE-120 (buffer overflow clássico), categoria historicamente associada a execução remota de código em dispositivos de rede embarcados — contexto preocupante dado que 9 CVEs são de severidade crítica e 7 contam com prova de conceito pública disponível. A CVE-2024-7332, considerada a mais perigosa atualmente, alcança EPSS de 0,2074, sugerindo probabilidade não trivial de exploração futura e merecendo atenção prioritária em ambientes que utilizam equipamentos da marca. As 4 vulnerabilidades surgidas nos últimos 90 dias indicam que a superfície de ataque segue em expansão recente, recomendando monitoramento contínuo e aplicação tempestiva de atualizações de firmware.

CVE-2026-42026CRITICALMultiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)EPSS 0.5%CVE-2026-42024CRITICALMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XEPSS 0.5%CVE-2026-9660CRITICALMultiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-XEPSS 0.5%CVE-2026-42023CRITICALMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XEPSS 0.5%CVE-2026-9817CRITICALA stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-EPSS 0.5%CVE-2026-42025CRITICALMultiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)EPSS 0.5%CVE-2025-6401MEDIUMTOTOLINK N300RH HTTP POST Message formFilter denial of serviceEPSS 0.5%CVE-2026-42021CRITICALMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XEPSS 0.5%CVE-2026-42022CRITICALMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XEPSS 0.5%CVE-2026-7717HIGHTotolink WA300 POST Request cstecgi.cgi UploadCustomModule buffer overflowEPSS 0.5%CVE-2026-6157HIGHTotolink A800R app.so setAppEasyWizardConfig buffer overflowEPSS 0.5%CVE-2026-6194HIGHTotolink A3002MU HTTP Request formWlanSetup sub_410188 stack-based overflowEPSS 0.5%CVE-2025-5505MEDIUMTOTOLINK A3002RU Virtual Server Page formPortFw cross site scriptingEPSS 0.5%CVE-2026-8137HIGHTotolink X5000R formDdns sub_458E40 buffer overflowEPSS 0.5%CVE-2026-7748HIGHTotolink N300RH POST Request cstecgi.cgi setUpgradeFW buffer overflowEPSS 0.5%CVE-2026-7750HIGHTotolink N300RH POST Request cstecgi.cgi setMacFilterRules buffer overflowEPSS 0.5%CVE-2026-7218HIGHTotolink N300RT libapmib.so formWsc is_cmd_string_valid buffer overflowEPSS 0.5%CVE-2024-7216LOWTOTOLINK LR1200 shadow.sample hard-coded passwordEPSS 0.4%CVE-2025-5508MEDIUMTOTOLINK A3002RU IP Port Filtering Page cross site scriptingEPSS 0.4%CVE-2024-7154MEDIUMTOTOLINK A3700R Password Reset wizard.html access controlEPSS 0.4%