Vulnerabilidades em totolink

557 resultados
Análise Vexday

A base do Vexday registra 30 CVEs associadas ao fornecedor totolink, todas classificadas como críticas pelo CVSS e todas publicadas nos últimos 90 dias, o que indica um volume concentrado e recente de exposição. Nenhuma delas consta no catálogo KEV até o momento, de modo que não há evidência de exploração ativa confirmada nesta base. A fraqueza dominante é o CWE-121 (estouro de buffer na pilha), padrão que merece atenção prioritária na avaliação de dispositivos desse fornecedor em uso.

CVE-2025-9533MEDIUMTOTOLINK T10 formLoginAuth.htm improper authenticationEPSS 12.2%CVE-2025-5904HIGHTOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflowEPSS 12.1%CVE-2025-5903HIGHTOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflowEPSS 12.1%CVE-2025-6299MEDIUMTOTOLINK N150RT formWSC os command injectionEPSS 11.6%CVE-2025-3663MEDIUMTOTOLINK A3700R Password cstecgi.cgi setWiFiEasyGuestCfg access controlEPSS 11.3%CVE-2025-8140HIGHTOTOLINK A702R HTTP POST Request formWlanMultipleAP buffer overflowEPSS 11.3%CVE-2025-8138HIGHTOTOLINK A702R HTTP POST Request formOneKeyAccessButton buffer overflowEPSS 11.3%CVE-2025-3987MEDIUMTOTOLINK N150RT formWsc command injectionEPSS 11.3%CVE-2024-7463HIGHTOTOLINK CP900 cstecgi.cgi UploadCustomModule buffer overflowEPSS 11.0%CVE-2026-9531MEDIUMTotolink CA750-PoE Setting cstecgi.cgi setUpgradeUboot os command injectionEPSS 10.4%CVE-2026-9534MEDIUMTotolink CA750-PoE Setting cstecgi.cgi setWiFiWpsConfig os command injectionEPSS 10.4%CVE-2026-9514MEDIUMTotolink CA750-PoE Setting cstecgi.cgi setNetworkDiag os command injectionEPSS 10.4%CVE-2026-9515MEDIUMTotolink CA750-PoE Setting cstecgi.cgi setUnloadUserData os command injectionEPSS 10.4%CVE-2026-9532MEDIUMTotolink CA750-PoE Setting cstecgi.cgi setUploadUserData os command injectionEPSS 10.4%CVE-2026-9533MEDIUMTotolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injectionEPSS 10.4%CVE-2025-6485MEDIUMTOTOLINK A3002R formWlSiteSurvey os command injectionEPSS 9.3%CVE-2025-5502MEDIUMTOTOLINK X15 formMapReboot command injectionEPSS 9.3%CVE-2025-52905HIGHTOTOLINK X6000R Argument Injection VulnerabilityEPSS 9.1%CVE-2024-7157HIGHTOTOLINK A3100R getSaveConfig buffer overflowEPSS 7.4%CVE-2026-10187CRITICALTotolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflowEPSS 7.3%