CVE-2025-67189
Published Feb 3, 2026A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204_B20210112. The urlKeyword parameter is not properly validated, and the fu…
Vendor/product archive
totolink / a950rg CVEs
Beta · best-effort33 CVEs tagged to totolink / a950rg — 20 Critical, 10 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2025-67188
Published Feb 3, 2026A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The issue resides in the setRadvdCfg interface of the /lib/cste_modules/ipv6.so module. The func…
CVE-2025-67187
Published Feb 3, 2026A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The flaw exists in the setIpQosRules interface of /lib/cste_modules/firewall…
CVE-2025-67186
Published Feb 3, 2026TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cste_modules/firewall.so. The vulnerability occurs beca…
CVE-2025-60702
Published Nov 13, 2025A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `system.so` binary. The `setDiagnosisCfg` function retrieves th…
CVE-2025-60699
Published Nov 13, 2025A buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `global.so` binary. The `getSaveConfig` function retrieves the `h…
CVE-2025-44655
Published Jul 21, 2025In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf. This could lead to unauthorized access to system files, privilege…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2025-4496
Published May 10, 2025A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the…
- evidence mentions
- 6
- Buzz score
- 36.0
CVE-2025-45798
Published May 8, 2025A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112. The vulnerability is located in the setNoticeCfg interface within the /lib/cste_modules/sy…
- evidence mentions
- 1
- Buzz score
- 16.4
CVE-2025-45797
Published May 8, 2025TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the set…
- evidence mentions
- 1
- Buzz score
- 16.4
CVE-2025-45800
Published May 2, 2025TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/global.so library, specifically in the p…
- evidence mentions
- 1
- Buzz score
- 16.4
CVE-2025-28028
Published Apr 23, 2025TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vu…
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2025-28025
Published Apr 23, 2025TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vu…
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2025-28036
Published Apr 22, 2025TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2025-28035
Published Apr 22, 2025TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2025-28029
Published Apr 22, 2025TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vu…
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2025-28027
Published Apr 22, 2025TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow vul…
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2025-28026
Published Apr 22, 2025TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vu…
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2025-28037
Published Apr 22, 2025TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the setDiagnosisCfg function t…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2025-28034
Published Apr 22, 2025TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1…
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2025-28033
Published Apr 22, 2025TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1…
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2025-28032
Published Apr 22, 2025TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2022-36612
Published Aug 29, 2022TOTOLINK A950RG V4.1.2cu.5204_B20210112 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
CVE-2022-28935
Published Jul 6, 2022Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU V5.…
CVE-2022-26214
Published Mar 15, 2022Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2c…
Showing 1-25 of 33 CVEsPage 1 of 2