Totolink Security Vulnerabilities (CVEs)

Track 475 security vulnerabilities affecting Totolink products and software. Get instant email alerts when new CVEs are discovered, automated security monitoring, and patch guidance.

202 Critical

195 High

78 Medium

Sort by:

🔔 Get Alerts for Totolink

CVE-2023-46417 9.8

This vulnerability allows remote attackers to execute arbitrary commands on TOTOLINK X6000R routers without authentication via a specific function. It...

Oct 25, 2023

CVE-2023-46419 9.8

This vulnerability allows remote attackers to execute arbitrary commands on TOTOLINK X6000R routers via a specific function. Attackers can gain full c...

Oct 25, 2023

CVE-2023-46421 9.8

This vulnerability allows remote attackers to execute arbitrary commands on TOTOLINK X6000R routers via a specific function (sub_411D00). Attackers ca...

Oct 25, 2023

CVE-2023-46423 9.8

This vulnerability allows remote attackers to execute arbitrary commands on TOTOLINK X6000R routers via the sub_417094 function. Attackers can gain fu...

Oct 25, 2023

CVE-2023-46548 9.8

This CVE describes a stack overflow vulnerability in the TOTOLINK X2000R router's web interface function formWlanRedirect. Attackers can exploit this ...

Oct 25, 2023

CVE-2023-46550 9.8

This CVE describes a stack overflow vulnerability in TOTOLINK X2000R routers that allows remote attackers to execute arbitrary code. The vulnerability...

Oct 25, 2023

CVE-2023-46552 9.8

This vulnerability is a stack overflow in the formMultiAP function of TOTOLINK X2000R routers, allowing remote attackers to execute arbitrary code or ...

Oct 25, 2023

CVE-2023-46554 9.8

This CVE describes a stack overflow vulnerability in TOTOLINK X2000R routers via the formMapDel function, allowing remote code execution. Attackers ca...

Oct 25, 2023

CVE-2023-46556 9.8

This vulnerability is a stack overflow in the formFilter function of TOTOLINK X2000R routers running firmware version 1.0.0-B20230221.0948.web. It all...

Oct 25, 2023

CVE-2023-46558 9.8

This vulnerability allows remote attackers to execute arbitrary code on TOTOLINK X2000R routers by exploiting a stack overflow in the formMapDelDevice...

Oct 25, 2023

CVE-2023-46560 9.8

This vulnerability allows remote attackers to execute arbitrary code on TOTOLINK X2000R routers by exploiting a stack overflow in the formTcpipSetup f...

Oct 25, 2023

CVE-2023-46563 9.8

This vulnerability is a stack overflow in the formIpQoS function of TOTOLINK X2000R routers running firmware version v1.0.0-B20230221.0948.web. It all...

Oct 25, 2023

CVE-2023-46574 9.8

This vulnerability allows remote attackers to execute arbitrary code on TOTOLINK A3700R routers by exploiting the FileName parameter in the UploadFirm...

Oct 25, 2023

CVE-2023-46540 9.8

This CVE describes a stack overflow vulnerability in the formNtp function of TOTOLINK X2000R routers running firmware version 1.0.0-B20230221.0948.web...

Oct 25, 2023

CVE-2023-46542 9.8

This CVE describes a stack overflow vulnerability in TOTOLINK X2000R routers that allows remote attackers to execute arbitrary code or cause denial of...

Oct 25, 2023

CVE-2023-46544 9.8

This CVE describes a stack overflow vulnerability in TOTOLINK X2000R routers via the formWirelessTbl function. Attackers can exploit this to execute a...

Oct 25, 2023

CVE-2023-46546 9.8

CVE-2023-46546 is a critical stack overflow vulnerability in TOTOLINK X2000R routers that allows remote attackers to execute arbitrary code by sending...

Oct 25, 2023

CVE-2023-45984 9.8

This vulnerability allows remote attackers to execute arbitrary code on affected TOTOLINK routers via a stack overflow in the setLanguageCfg function....

Oct 16, 2023

CVE-2023-36955 9.8

This vulnerability allows remote attackers to execute arbitrary code on TOTOLINK CP300+ routers by exploiting a stack overflow in the UploadCustomModu...

Oct 16, 2023

CVE-2023-36953 9.8

CVE-2023-36953 is a command injection vulnerability in TOTOLINK CP300+ routers that allows attackers to execute arbitrary commands on affected devices...

Oct 16, 2023

CVE-2023-36340 9.8

This vulnerability allows remote attackers to execute arbitrary code on TOTOLINK NR1800X routers by exploiting a stack overflow in the loginAuth funct...

Oct 16, 2023

CVE-2023-36952 9.8

CVE-2023-36952 is a critical stack overflow vulnerability in TOTOLINK CP300+ routers that allows remote attackers to execute arbitrary code by sending...

Oct 16, 2023

CVE-2023-4746 8.8

This critical vulnerability in TOTOLINK N200RE V5 routers allows remote attackers to bypass validation mechanisms via a format string issue, leading t...

Sep 4, 2023

CVE-2023-39617 9.8

This vulnerability allows remote attackers to execute arbitrary code on affected TOTOLINK X5000R routers by sending specially crafted requests to the ...

Aug 21, 2023

CVE-2023-40041 9.8

This vulnerability allows remote attackers to execute arbitrary code on TOTOLINK T10_v2 routers by exploiting a stack-based buffer overflow in the WPS...

Aug 8, 2023

CVE-2023-37170 9.8

This vulnerability allows unauthenticated attackers to execute arbitrary commands on TOTOLINK A3300R routers by manipulating the lang parameter in the...

Jul 7, 2023

CVE-2023-37172 9.8

This CVE describes a command injection vulnerability in TOTOLINK A3300R routers that allows attackers to execute arbitrary commands on the device. Att...

Jul 7, 2023

CVE-2023-37146 9.8

This vulnerability allows remote attackers to execute arbitrary commands on TOTOLINK LR350 routers by injecting malicious commands into the FileName p...

Jul 7, 2023

CVE-2023-37149 9.8

This vulnerability allows remote attackers to execute arbitrary commands on TOTOLINK LR350 routers by injecting malicious commands into the FileName p...

Jul 7, 2023

CVE-2023-33556 9.8

This CVE describes a command injection vulnerability in TOTOLink A7100RU routers that allows attackers to execute arbitrary commands on the device. Th...

Jun 7, 2023

CVE-2023-31569 9.8

This vulnerability allows remote attackers to execute arbitrary commands on TOTOLINK X5000R routers via command injection in the setWanCfg function. A...

Jun 6, 2023

CVE-2023-31729 9.8

CVE-2023-31729 is a command injection vulnerability in TOTOLINK A3300R routers that allows attackers to execute arbitrary commands on the device via t...

May 18, 2023

CVE-2023-31856 9.8

This CVE describes a command injection vulnerability in TOTOLINK CP300+ routers that allows attackers to execute arbitrary commands via crafted HTTP p...

May 16, 2023

CVE-2023-30053 9.8

This vulnerability allows remote attackers to execute arbitrary commands on TOTOLINK A7100RU routers. Attackers can inject malicious commands through ...

May 5, 2023

CVE-2023-30013 9.8

This CVE describes a command injection vulnerability in TOTOLINK X5000R routers that allows remote attackers to execute arbitrary commands via the 'co...

May 5, 2023

CVE-2023-29800 9.8

This vulnerability allows remote attackers to execute arbitrary commands on TOTOLINK X18 routers by injecting malicious commands into the FileName par...

Apr 14, 2023

CVE-2023-29802 9.8

This CVE describes a command injection vulnerability in TOTOLINK X18 routers that allows attackers to execute arbitrary commands on the device by mani...

Apr 14, 2023

CVE-2023-29798 9.8

This vulnerability allows remote attackers to execute arbitrary commands on TOTOLINK X18 routers by injecting malicious commands into the setTracerout...

Apr 14, 2023

CVE-2023-26848 9.8

This CVE describes a command injection vulnerability in TOTOlink A7100RU routers via the org parameter in the setting/delStaticDhcpRules endpoint, all...

Apr 7, 2023

CVE-2023-27232 9.8

This CVE describes a command injection vulnerability in TOTOlink A7100RU routers that allows attackers to execute arbitrary commands on the device. At...

Mar 28, 2023

CVE-2023-27229 9.8

This CVE describes a command injection vulnerability in TOTOlink A7100RU routers that allows attackers to execute arbitrary commands on the device. At...

Mar 28, 2023

CVE-2022-28497 9.8

This critical vulnerability in TOTOLink CP900 outdoor CPE devices allows attackers to execute arbitrary commands via command injection in the mtd_writ...

Mar 23, 2023

CVE-2022-28491 9.8

This is a critical command injection vulnerability in TOTOLink CP900 outdoor CPE devices that allows unauthenticated attackers to execute arbitrary sy...

Mar 23, 2023

CVE-2022-28492 9.8

CVE-2022-28492 is a critical authentication bypass vulnerability in TOTOLINK CPE devices that allows remote attackers to gain unauthorized access with...

Mar 23, 2023

CVE-2022-28494 9.8

This CVE describes a command injection vulnerability in TOTOLink CP900 outdoor CPE devices that allows attackers to execute arbitrary commands via the...

Mar 23, 2023

CVE-2023-25395 9.8

This vulnerability allows remote attackers to execute arbitrary commands on TOTOlink A7100RU routers via command injection in the 'ou' parameter. Atta...

Mar 8, 2023

CVE-2023-23064 9.8

CVE-2023-23064 is an incorrect access control vulnerability in TOTOLINK A720R routers that allows unauthenticated attackers to bypass authentication a...

Feb 17, 2023

CVE-2023-24236 9.8

This vulnerability allows remote attackers to execute arbitrary commands on TOTOLink A7100RU routers by injecting malicious commands into the province...

Feb 16, 2023

CVE-2023-24159 9.8

This vulnerability allows remote attackers to execute arbitrary commands on TOTOLINK CA300-PoE routers by injecting malicious commands into the admpas...

Feb 14, 2023

CVE-2023-24161 9.8

This vulnerability allows remote attackers to execute arbitrary commands on TOTOLINK CA300-PoE routers by injecting malicious commands through the web...

Feb 14, 2023

← Previous Page 8 of 10 Next →

Why Monitor Totolink Security Vulnerabilities?

Real-time CVE tracking: Our automated system monitors 475+ known vulnerabilities affecting Totolink products and software packages. Stay ahead of emerging threats with instant email notifications when new security issues are discovered.

Automated security monitoring: Unlike manual CVE checking, FixTheCVE automatically scans your servers and detects vulnerable Totolink packages in under 60 seconds. No agents required - completely agentless scanning that works across Totolink deployments.

Free vulnerability database: Access detailed information about every Totolink CVE including CVSS scores, severity ratings, affected versions, and actionable patch guidance. Filter by critical, high, medium, or low severity to prioritize your security remediation efforts.

🚀 Get Started in 60 Seconds

Register free account & add your servers
Run one-time scan or schedule automatic monitoring (every 1-24 hours)
Receive instant alerts when new Totolink CVEs affect your systems
Access dashboard with severity breakdown & fix instructions

Start Monitoring Totolink CVEs Free