Vulnerabilidades em totolink
557 resultadosAnálise Vexday
A base do Vexday registra 30 CVEs associadas ao fornecedor totolink, todas classificadas como críticas pelo CVSS e todas publicadas nos últimos 90 dias, o que indica um volume concentrado e recente de exposição. Nenhuma delas consta no catálogo KEV até o momento, de modo que não há evidência de exploração ativa confirmada nesta base. A fraqueza dominante é o CWE-121 (estouro de buffer na pilha), padrão que merece atenção prioritária na avaliação de dispositivos desse fornecedor em uso.
CVE-2025-3666MEDIUMTOTOLINK A3700R cstecgi.cgi setDdnsCfg access controlEPSS 0.6%CVE-2026-124057CRITICALTOTOLINK CA300-PoE cstecgi.cgi setWiFiMultipleConfig buffer overflowEPSS 0.6%CVE-2026-9827CRITICALA arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B202504EPSS 0.6%CVE-2026-10139CRITICALA stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327EPSS 0.6%CVE-2026-7719CRITICALTotolink WA300 POST Request cstecgi.cgi loginauth buffer overflowEPSS 0.6%CVE-2025-3675MEDIUMTOTOLINK A3700R cstecgi.cgi setL2tpServerCfg access controlEPSS 0.6%CVE-2025-3664MEDIUMTOTOLINK A3700R cstecgi.cgi setWiFiEasyGuestCfg access controlEPSS 0.6%CVE-2025-3665MEDIUMTOTOLINK A3700R cstecgi.cgi setSmartQosCfg access controlEPSS 0.6%CVE-2026-116508CRITICALTOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflowEPSS 0.6%CVE-2026-7747CRITICALTotolink N300RH Parameter cstecgi.cgi loginauth buffer overflowEPSS 0.6%CVE-2026-121597CRITICALTOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflowEPSS 0.6%CVE-2026-10132CRITICALA stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-BEPSS 0.6%CVE-2026-10136CRITICALA heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20EPSS 0.6%CVE-2026-10133CRITICALA stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.EPSS 0.6%CVE-2026-10137CRITICALA stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B2EPSS 0.6%CVE-2026-15204MEDIUMTOTOLINK X5000R OpenVPN Export cstecgi.cgi exportOvpn path traversalEPSS 0.6%CVE-2025-4269MEDIUMTOTOLINK A720R Log cstecgi.cgi access controlEPSS 0.6%CVE-2025-3674MEDIUMTOTOLINK A3700R cstecgi.cgi setUrlFilterRules access controlEPSS 0.6%CVE-2024-0943LOWTotolink N350RT cstecgi.cgi session expirationEPSS 0.6%CVE-2026-7219HIGHTotolink N300RT formIpQoS buffer overflowEPSS 0.6%