Vulnerabilidades em Totolink

557 resultados
Análise Vexday

Com 200 CVEs catalogadas, os dispositivos Totolink apresentam um volume expressivo de vulnerabilidades, sendo 95 delas de severidade crítica e 138 com prova de conceito pública disponível — o que reduz significativamente a barreira técnica para exploração. Um dado que merece atenção imediata é o surgimento de 125 novas CVEs nos últimos 90 dias, indicando ritmo acelerado de descobertas recentes. A falha mais recorrente é CWE-77 (injeção de comando), classe que tende a ter alto impacto em dispositivos de rede e costuma ser alvo prioritário em ambientes expostos. Embora nenhuma CVE da Totolink conste atualmente no catálogo KEV da CISA — situação abaixo da média geral do catálogo —, a CVE-2023-6612 registra o maior score EPSS observado (0,3068), sugerindo probabilidade relevante de exploração ativa no curto prazo e exigindo priorização nas rotinas de correção.

CVE-2026-6168HIGHTOTOLINK A7000R cstecgi.cgi setWiFiEasyGuestCfg stack-based overflowEPSS 0.6%CVE-2026-7749HIGHTotolink N300RH POST Request cstecgi.cgi setWanConfig buffer overflowEPSS 0.6%CVE-2024-7159MEDIUMTOTOLINK A3600R Telnet Service product.ini hard-coded passwordEPSS 0.6%CVE-2025-2688MEDIUMTOTOLINK A3000RU Syslog Configuration File ExportSyslog.sh access controlEPSS 0.6%CVE-2026-42025CRITICALMultiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)EPSS 0.5%CVE-2026-9869CRITICALA stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0EPSS 0.5%CVE-2026-42026CRITICALMultiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)EPSS 0.5%CVE-2026-42023CRITICALMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XEPSS 0.5%CVE-2026-9817CRITICALA stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-EPSS 0.5%CVE-2026-42024CRITICALMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XEPSS 0.5%CVE-2026-9660CRITICALMultiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-XEPSS 0.5%CVE-2026-124060CRITICALTOTOLINK CA300-PoE cstecgi.cgi UploadCustomModule buffer overflowEPSS 0.5%CVE-2026-124058CRITICALTOTOLINK CA300-PoE cstecgi.cgi setWiFiRepeaterConfig buffer overflowEPSS 0.5%CVE-2026-124059CRITICALTOTOLINK CA300-PoE cstecgi.cgi setWiFiWdsAddConfig buffer overflowEPSS 0.5%CVE-2025-6401MEDIUMTOTOLINK N300RH HTTP POST Message formFilter denial of serviceEPSS 0.5%CVE-2026-42021CRITICALMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XEPSS 0.5%CVE-2026-42022CRITICALMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XEPSS 0.5%CVE-2026-6194HIGHTotolink A3002MU HTTP Request formWlanSetup sub_410188 stack-based overflowEPSS 0.5%CVE-2026-7717HIGHTotolink WA300 POST Request cstecgi.cgi UploadCustomModule buffer overflowEPSS 0.5%CVE-2026-6157HIGHTotolink A800R app.so setAppEasyWizardConfig buffer overflowEPSS 0.5%