Vulnerabilidades em totolink

557 resultados
Análise Vexday

A base do Vexday registra 30 CVEs associadas ao fornecedor totolink, todas classificadas como críticas pelo CVSS e todas publicadas nos últimos 90 dias, o que indica um volume concentrado e recente de exposição. Nenhuma delas consta no catálogo KEV até o momento, de modo que não há evidência de exploração ativa confirmada nesta base. A fraqueza dominante é o CWE-121 (estouro de buffer na pilha), padrão que merece atenção prioritária na avaliação de dispositivos desse fornecedor em uso.

CVE-2025-12241HIGHTOTOLINK A3300R POST Parameter cstecgi.cgi setLanguageCfg stack-based overflowEPSS 1.0%CVE-2025-12258HIGHTOTOLINK A3300R POST Parameter cstecgi.cg setOpModeCfg stack-based overflowEPSS 1.0%CVE-2025-12260HIGHTOTOLINK A3300R POST Parameter cstecgi.cgi setSyslogCfg stack-based overflowEPSS 1.0%CVE-2025-12259HIGHTOTOLINK A3300R POST Parameter cstecgi.cgi setScheduleCfg stack-based overflowEPSS 1.0%CVE-2024-7212HIGHTOTOLINK A7000R cstecgi.cgi loginauth buffer overflowEPSS 1.0%CVE-2025-6568HIGHTOTOLINK EX1200T HTTP POST Request formIpv6Setup buffer overflowEPSS 1.0%CVE-2025-5734HIGHTOTOLINK X15 HTTP POST Request formWlanRedirect buffer overflowEPSS 1.0%CVE-2025-5735HIGHTOTOLINK X15 HTTP POST Request formSetLg buffer overflowEPSS 1.0%CVE-2025-6825HIGHTOTOLINK A702R HTTP POST Request formWlSiteSurvey buffer overflowEPSS 1.0%CVE-2025-5736HIGHTOTOLINK X15 HTTP POST Request formNtp buffer overflowEPSS 1.0%CVE-2025-6487HIGHTOTOLINK A3002R formRoute stack-based overflowEPSS 1.0%CVE-2025-6486HIGHTOTOLINK A3002R formWlanMultipleAP stack-based overflowEPSS 1.0%CVE-2025-14964CRITICALTOTOLINK T10 cstecgi.cgi sprintf stack-based overflowEPSS 1.0%CVE-2025-5793HIGHTOTOLINK EX1200T HTTP POST Request formPortFw buffer overflowEPSS 1.0%CVE-2026-7721MEDIUMTotolink WA300 cstecgi.cgi NTPSyncWithHost command injectionEPSS 1.0%CVE-2026-7720MEDIUMTotolink WA300 POST Request cstecgi.cgi setLanguageCfg command injectionEPSS 1.0%CVE-2026-7718MEDIUMTotolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injectionEPSS 1.0%CVE-2026-1157HIGHTotolink LR350 cstecgi.cgi setWiFiEasyCfg buffer overflowEPSS 1.0%CVE-2026-1723CRITICALTOTOLINK X6000R Unauthenticated Command Injection VulnerabilityEPSS 1.0%CVE-2025-7758HIGHTOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg buffer overflowEPSS 1.0%