Vulnerabilidades em totolink
553 resultadosAnálise Vexday
A base do Vexday registra 30 CVEs associadas ao fornecedor totolink, todas classificadas como críticas pelo CVSS e todas publicadas nos últimos 90 dias, o que indica um volume concentrado e recente de exposição. Nenhuma delas consta no catálogo KEV até o momento, de modo que não há evidência de exploração ativa confirmada nesta base. A fraqueza dominante é o CWE-121 (estouro de buffer na pilha), padrão que merece atenção prioritária na avaliação de dispositivos desse fornecedor em uso.
CVE-2026-10138CRITICALA OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421EPSS 1.4%CVE-2025-8244HIGHTOTOLINK X15 HTTP POST Request formMapDelDevice buffer overflowEPSS 1.4%CVE-2024-8573HIGHTOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflowEPSS 1.4%CVE-2024-0998HIGHTotolink N200RE cstecgi.cgi setDiagnosisCfg stack-based overflowEPSS 1.4%CVE-2024-1001HIGHTotolink N200RE cstecgi.cgi main stack-based overflowEPSS 1.4%CVE-2026-10135CRITICALA OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). EPSS 1.4%CVE-2026-10131CRITICALAn OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20EPSS 1.4%CVE-2025-3668MEDIUMTOTOLINK A3700R cstecgi.cgi setScheduleCfg access controlEPSS 1.4%CVE-2024-8579HIGHTOTOLINK AC1200 T8 cstecgi.cgi setWiFiRepeaterCfg buffer overflowEPSS 1.3%CVE-2024-7465HIGHTOTOLINK CP450 cstecgi.cgi loginauth buffer overflowEPSS 1.3%CVE-2024-7462HIGHTOTOLINK N350RT cstecgi.cgi setWizardCfg buffer overflowEPSS 1.3%CVE-2025-5600CRITICALTOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflowEPSS 1.3%CVE-2025-6146HIGHTOTOLINK X15 HTTP POST Request formSysLog buffer overflowEPSS 1.3%CVE-2024-8580CRITICALTOTOLINK AC1200 T8 shadow.sample hard-coded passwordEPSS 1.3%CVE-2024-0572HIGHTotolink LR1200GB cstecgi.cgi setOpModeCfg stack-based overflowEPSS 1.3%CVE-2024-0571HIGHTotolink LR1200GB cstecgi.cgi setSmsCfg stack-based overflowEPSS 1.3%CVE-2023-7222HIGHTotolink X2000R HTTP POST Request boa formTmultiAP buffer overflowEPSS 1.3%CVE-2025-8242HIGHTOTOLINK X15 HTTP POST Request formFilter buffer overflowEPSS 1.3%CVE-2026-5691MEDIUMTotolink A7100RU cstecgi.cgi setFirewallType os command injectionEPSS 1.3%CVE-2025-8170HIGHTOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflowEPSS 1.3%