İçeriğe atla
Noroxi

TOTOLINK kayıtları

TOTOLINK üreticisine ait 1.108 yayımlanmış kayıt. Bunların 0 tanesi sahada sömürüldü (CISA KEV listesinde), 1 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %0,1
Pre-auth RCE
385
Düzeltme kaydı olan
%0,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 17
  2. 18
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

1.108 kayıt
  • CVE-2023-30013
    60Bu hafta

    TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg.

    KritikCVSS 9,8SilahlaştırılmışEPSS %25

    totolink · x5000r firmware5 May 2023

  • CVE-2023-46574
    59Planlayın

    An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the Uplo

    KritikCVSS 9,8Kavram kanıtıEPSS %65

    totolink · a3700r firmware25 Eki 2023

  • CVE-2022-25075
    56Planlayın

    TOTOLink A3000RU V5.9c.2280_B20180512 was discovered to contain a command injection vulnerability in the "Main" function.

    KritikCVSS 9,8İstismar yokEPSS %56

    totolink · a3000ru firmware24 Şub 2022

  • CVE-2021-42887
    52Planlayın

    In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.

    KritikCVSS 9,8Kavram kanıtıEPSS %44

    totolink · ex1200t firmware3 Haz 2022

  • CVE-2021-43711
    50Planlayın

    The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET paramete

    KritikCVSS 9,8İstismar yokEPSS %37

    totolink · ex200 firmware4 Oca 2022

  • CVE-2025-28137
    49Planlayın

    The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg funct

    KritikCVSS 9,8Kavram kanıtıEPSS %34

    totolink · a810r firmware15 Nis 2025

  • CVE-2023-6612
    48Planlayın

    Totolink X5000R cstecgi.cgi setWizardCfg os command injection

    KritikCVSS 9,8İstismar yokEPSS %30

    totolink · x5000r firmware8 Ara 2023

  • CVE-2022-25077
    48Planlayın

    TOTOLink A3100R V4.1.2cu.5050_B20200504 was discovered to contain a command injection vulnerability in the "Main" function.

    KritikCVSS 9,8İstismar yokEPSS %30

    totolink · a3100r firmware24 Şub 2022

  • CVE-2019-19825
    48Planlayın

    On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/

    KritikCVSS 9,8Kavram kanıtıEPSS %29

    totolink · a3002ru firmware27 Oca 2020

  • CVE-2024-31817
    47Planlayın

    In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getSysStat

    YüksekCVSS 7,5İstismar yokEPSS %55

    totolink · ex200 firmware8 Nis 2024

  • CVE-2022-26213
    47Planlayın

    Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via t

    KritikCVSS 9,8İstismar yokEPSS %25

    totolink · x5000r firmware15 Mar 2022

  • CVE-2022-25084
    46Planlayın

    TOTOLink T6 V5.9c.4085_B20190428 was discovered to contain a command injection vulnerability in the "Main" function.

    KritikCVSS 9,8İstismar yokEPSS %21

    totolink · t6 firmware24 Şub 2022

  • CVE-2022-38308
    45Planlayın

    TOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cst

    KritikCVSS 9,8İstismar yokEPSS %21

    totolink · a7000ru firmware14 Eyl 2022

  • CVE-2025-13184
    45Planlayın

    Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password

    KritikCVSS 9,8İstismar yokEPSS %20

    totolink · x5000r firmware10 Ara 2025

  • CVE-2022-38828
    45Planlayın

    TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi

    KritikCVSS 9,8İstismar yokEPSS %20

    totolink · t6 firmware16 Eyl 2022

  • CVE-2022-26187
    45Planlayın

    TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the pingCheck function.

    KritikCVSS 9,8İstismar yokEPSS %19

    totolink · n600r firmware22 Mar 2022

  • CVE-2022-32449
    45Planlayın

    TOTOLINK EX300_V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg

    KritikCVSS 9,8İstismar yokEPSS %19

    totolink · ex300 v2 firmware7 Tem 2022

  • CVE-2025-45797
    44Planlayın

    TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %18

    totolink · a950rg firmware8 May 2025

  • CVE-2019-19824
    43Planlayın

    On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the b

    YüksekCVSS 8,8Kavram kanıtıEPSS %25

    totolink · a3002ru firmware27 Oca 2020

  • CVE-2024-7332
    43Planlayın

    TOTOLINK CP450 Telnet Service product.ini hard-coded password

    KritikCVSS 9,3Kavram kanıtıEPSS %20

    totolink · cp450 firmware31 Tem 2024

  • CVE-2024-1781
    43Planlayın

    Totolink X6000R AX3000 shttpd cstecgi.cgi setWizardCfg command injection

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    totolink · x6000r firmware22 Şub 2024

  • CVE-2023-7095
    43Planlayın

    Totolink A7100RU HTTP POST Request main buffer overflow

    KritikCVSS 9,8İstismar yokEPSS %13

    totolink · a7100ru firmware24 Ara 2023

  • CVE-2022-25082
    43Planlayın

    TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a command injection vulnerability in the "Main"

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    totolink · a950rg firmware24 Şub 2022

  • CVE-2022-38827
    43Planlayın

    TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi

    KritikCVSS 9,8İstismar yokEPSS %13

    totolink · t6 firmware16 Eyl 2022

  • CVE-2021-46009
    43Planlayın

    In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication.

    KritikCVSS 9,8İstismar yokEPSS %12

    totolink · a3100r firmware30 Mar 2022