Vulnerabilidades em totolink

548 resultados
Análise Vexday

A base do Vexday registra 30 CVEs associadas ao fornecedor totolink, todas classificadas como críticas pelo CVSS e todas publicadas nos últimos 90 dias, o que indica um volume concentrado e recente de exposição. Nenhuma delas consta no catálogo KEV até o momento, de modo que não há evidência de exploração ativa confirmada nesta base. A fraqueza dominante é o CWE-121 (estouro de buffer na pilha), padrão que merece atenção prioritária na avaliação de dispositivos desse fornecedor em uso.

CVE-2024-8162CRITICALTOTOLINK T10 AC1200 Telnet Service product.ini hard-coded credentialsEPSS 1.7%CVE-2026-5692MEDIUMTotolink A7100RU cstecgi.cgi setGameSpeedCfg os command injectionEPSS 1.6%CVE-2026-5690MEDIUMTotolink A7100RU cstecgi.cgi setRemoteCfg os command injectionEPSS 1.6%CVE-2026-5689MEDIUMTotolink A7100RU cstecgi.cgi setNtpCfg os command injectionEPSS 1.6%CVE-2026-9814CRITICALAn OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B2EPSS 1.6%CVE-2026-5688MEDIUMTotolink A7100RU cstecgi.cgi setDdnsCfg os command injectionEPSS 1.6%CVE-2024-10654MEDIUMTOTOLINK LR350 formLoginAuth.htm authorizationEPSS 1.6%CVE-2026-6158MEDIUMTotolink N300RH upgrade.so setUpgradeUboot os command injectionEPSS 1.6%CVE-2025-4851MEDIUMTOTOLINK N300RH cstecgi.cgi setUploadUserData command injectionEPSS 1.5%CVE-2026-116504CRITICALTOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injectionEPSS 1.5%CVE-2025-4849MEDIUMTOTOLINK N300RH cstecgi.cgi CloudACMunualUpdateUserdata command injectionEPSS 1.5%CVE-2024-0944LOWTotolink T8 cstecgi.cgi session expirationEPSS 1.5%CVE-2023-7221CRITICALTotolink T6 HTTP POST Request main buffer overflowEPSS 1.5%CVE-2023-7220CRITICALTotolink NR1800X cstecgi.cgi loginAuth stack-based overflowEPSS 1.5%CVE-2024-0999HIGHTotolink N200RE cstecgi.cgi setParentalRules stack-based overflowEPSS 1.5%CVE-2026-7548HIGHTotolink NR1800X cstecgi.cgi sub_41A68C command injectionEPSS 1.5%CVE-2024-7908HIGHTOTOLINK EX1200L cstecgi.cgi setDefResponse stack-based overflowEPSS 1.5%CVE-2024-7909HIGHTOTOLINK EX1200L cstecgi.cgi setLanguageCfg stack-based overflowEPSS 1.5%CVE-2025-3988HIGHTOTOLINK N150RT formPortFw buffer overflowEPSS 1.5%CVE-2026-10138CRITICALA OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421EPSS 1.4%