Totolink A810R Firmware vulnerabilities
29 known vulnerabilities affecting totolink/a810r_firmware.
Total CVEs
29
CISA KEV
0
Public exploits
0
Exploited in wild
5
Severity breakdown
CRITICAL16HIGH12MEDIUM1
Vulnerabilities
Page 2 of 2
CVE-2022-28935P3HIGHCVSS 7.2v4.1.2cu.5182_b202010262022-07-06
CVE-2022-28935 [HIGH] CWE-77 CVE-2022-28935: Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2
Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU V5.9c.5185_B20201128, Totolink A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability.
nvd
CVE-2025-28022P3HIGHCVSS 7.3v4.1.2cu.5182_b202010262025-04-23
CVE-2025-28022 [HIGH] CWE-120 CVE-2025-28022: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downl
TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.
nvd
CVE-2025-28021P3HIGHCVSS 7.3v4.1.2cu.5182_b202010262025-04-23
CVE-2025-28021 [HIGH] CWE-120 CVE-2025-28021: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the d
TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the downloadFile.cgi through the v14 and v3 parameters
nvd
CVE-2025-28033P3HIGHCVSS 7.3v4.1.2cu.5182_b202010262025-04-22
CVE-2025-28033 [HIGH] CWE-121 CVE-2025-28033: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpTo parameter.
nvd
CVE-2025-28032P3HIGHCVSS 7.3v4.1.2cu.5182_b202010262025-04-22
CVE-2025-28032 [HIGH] CWE-121 CVE-2025-28032: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm parameter.
nvd
CVE-2024-53335P3HIGHCVSS 7.8v4.1.2cu.5182_b202010262024-11-21
CVE-2024-53335 [HIGH] CWE-120 CVE-2024-53335: TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in downloadFlile.cgi.
TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in downloadFlile.cgi.
nvd
CVE-2025-28135P3HIGHCVSS 7.5v4.1.2cu.5182_b202010262025-03-27
CVE-2025-28135 [HIGH] CWE-121 CVE-2025-28135: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downl
TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi.
nvd
CVE-2022-36616P3HIGHCVSS 7.8v4.1.2cu.5182_b202010262022-08-29
CVE-2022-36616 [HIGH] CWE-798 CVE-2022-36616: TOTOLINK A810R V4.1.2cu.5182_B20201026 and V5.9c.4050_B20190424 was discovered to contain a hardcode
TOTOLINK A810R V4.1.2cu.5182_B20201026 and V5.9c.4050_B20190424 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
nvd
CVE-2025-28031P4MEDIUMCVSS 6.5v4.1.2cu.5182_b202010262025-04-22
CVE-2025-28031 [MEDIUM] CWE-259 CVE-2025-28031: TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the telnet
TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini.
nvd
← Previous2 / 2