Totolink A3700R Firmware vulnerabilities

43 known vulnerabilities affecting totolink/a3700r_firmware.

Total CVEs

43

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL17HIGH15MEDIUM11

Vulnerabilities

Page 3 of 3

CVE-2022-36464HIGHCVSS 7.8v9.1.2u.6134_b202012022022-08-25

CVE-2022-36464 [HIGH] CWE-787 CVE-2022-36464: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort para TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.

CVE-2022-36459HIGHCVSS 7.8v9.1.2u.6134_b202012022022-08-25

CVE-2022-36459 [HIGH] CWE-78 CVE-2022-36459: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability v TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost.

CVE-2022-36462HIGHCVSS 7.8v9.1.2u.6134_b202012022022-08-25

CVE-2022-36462 [HIGH] CWE-787 CVE-2022-36462: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang param TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.

← Previous3 / 3