📦 A830r Firmware

by Totolink

🔍 What is A830r Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-28034

CRITICAL CVSS 9.8 Apr 22, 2025

This CVE describes a pre-authentication remote command execution vulnerability in multiple TOTOLINK router models. Attackers can execute arbitrary commands on affected devices without authentication b...

CVE-2022-26206

CRITICAL CVSS 9.8 Mar 15, 2022

This CVE describes a critical command injection vulnerability in multiple Totolink router models. Attackers can execute arbitrary system commands by sending specially crafted requests to the setLangua...

CVE-2022-26208

CRITICAL CVSS 9.8 Mar 15, 2022

This CVE describes a command injection vulnerability in multiple Totolink router models that allows attackers to execute arbitrary commands via the webWlanIdx parameter in the setWebWlanIdx function. ...

CVE-2022-26210

CRITICAL CVSS 9.8 Mar 15, 2022

This CVE describes a command injection vulnerability in multiple Totolink router models that allows attackers to execute arbitrary commands via the FileName parameter in the setUpgradeFW function. Att...

CVE-2022-26212

CRITICAL CVSS 9.8 Mar 15, 2022

This CVE describes a command injection vulnerability in multiple Totolink router models that allows attackers to execute arbitrary commands via the setDeviceName function. Attackers can exploit this b...

CVE-2022-26214

CRITICAL CVSS 9.8 Mar 15, 2022

This CVE describes a command injection vulnerability in multiple Totolink router models that allows attackers to execute arbitrary commands via the host_time parameter in the NTPSyncWithHost function....

CVE-2022-25080

CRITICAL CVSS 9.8 Feb 24, 2022

This critical vulnerability in TOTOLink A830R routers allows remote attackers to execute arbitrary commands via the QUERY_STRING parameter in the Main function. Attackers can gain complete control of ...

CVE-2021-44247

CRITICAL CVSS 9.8 Feb 4, 2022

This CVE describes a command injection vulnerability in Totolink router firmware that allows attackers to execute arbitrary commands via the IpFrom parameter in the setNoticeCfg function. Attackers ca...

CVE-2025-28028

HIGH CVSS 7.3 Apr 23, 2025

A buffer overflow vulnerability in TOTOLINK routers' downloadFile.cgi component allows attackers to execute arbitrary code by sending specially crafted requests to the v5 parameter. This affects multi...

CVE-2025-28032

HIGH CVSS 7.3 Apr 22, 2025

This CVE describes a pre-authentication buffer overflow vulnerability in multiple TOTOLINK router models. Attackers can exploit this by sending specially crafted requests to the setNoticeCfg function ...

CVE-2022-28935

HIGH CVSS 7.2 Jul 6, 2022

This CVE describes a command injection vulnerability in multiple Totolink router models that allows attackers to execute arbitrary commands on affected devices. The vulnerability affects specific firm...

CVE-2021-44246

HIGH CVSS 7.5 Feb 4, 2022

This vulnerability is a stack overflow in the setNoticeCfg function of Totolink routers, allowing attackers to cause Denial of Service (DoS) by sending specially crafted requests with the IpTo paramet...