TOTOLINK / A3600r Firmware
25 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-31027 | TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so. The vulnerability occu… | CRITICAL | 9.8 | Apr 1, 2026 |
| CVE-2026-5020 | Totolink A3600R Parameter cstecgi.cgi setNoticeCfg command injection | MEDIUM | 5.3 | Mar 29, 2026 |
| CVE-2026-1686 | Totolink A3600R app.so setAppEasyWizardConfig buffer overflow | HIGH | 8.7 | Jan 30, 2026 |
| CVE-2024-7187 | TOTOLINK A3600R cstecgi.cgi UploadCustomModule buffer overflow | HIGH | 8.7 | Jul 29, 2024 |
| CVE-2024-7186 | TOTOLINK A3600R cstecgi.cgi setWiFiAclAddConfig buffer overflow | HIGH | 8.7 | Jul 29, 2024 |
| CVE-2024-7185 | TOTOLINK A3600R cstecgi.cgi setWebWlanIdx buffer overflow | HIGH | 8.7 | Jul 29, 2024 |
| CVE-2024-7184 | TOTOLINK A3600R cstecgi.cgi setUrlFilterRules buffer overflow | HIGH | 8.7 | Jul 29, 2024 |
| CVE-2024-7183 | TOTOLINK A3600R cstecgi.cgi setUploadSetting buffer overflow | HIGH | 8.7 | Jul 29, 2024 |
| CVE-2024-7182 | TOTOLINK A3600R cstecgi.cgi setUpgradeFW buffer overflow | HIGH | 8.7 | Jul 29, 2024 |
| CVE-2024-7181 | TOTOLINK A3600R cstecgi.cgi setTelnetCfg command injection | MEDIUM | 5.3 | Jul 29, 2024 |
| CVE-2024-7180 | TOTOLINK A3600R cstecgi.cgi setPortForwardRules buffer overflow | HIGH | 8.7 | Jul 29, 2024 |
| CVE-2024-7179 | TOTOLINK A3600R cstecgi.cgi setParentalRules buffer overflow | HIGH | 8.7 | Jul 29, 2024 |
| CVE-2024-7178 | TOTOLINK A3600R cstecgi.cgi setMacQos buffer overflow | HIGH | 8.7 | Jul 29, 2024 |
| CVE-2024-7177 | TOTOLINK A3600R cstecgi.cgi setLanguageCfg buffer overflow | HIGH | 8.7 | Jul 29, 2024 |
| CVE-2024-7176 | TOTOLINK A3600R cstecgi.cgi setIpQosRules buffer overflow | HIGH | 8.7 | Jul 29, 2024 |
| CVE-2024-7175 | TOTOLINK A3600R cstecgi.cgi setDiagnosisCfg os command injection | MEDIUM | 5.3 | Jul 29, 2024 |
| CVE-2024-7174 | TOTOLINK A3600R cstecgi.cgi setdeviceName buffer overflow | HIGH | 8.7 | Jul 29, 2024 |
| CVE-2024-7173 | TOTOLINK A3600R cstecgi.cgi loginauth buffer overflow | HIGH | 8.7 | Jul 28, 2024 |
| CVE-2024-7172 | TOTOLINK A3600R getSaveConfig buffer overflow | HIGH | 8.7 | Jul 28, 2024 |
| CVE-2024-7171 | TOTOLINK A3600R cstecgi.cgi NTPSyncWithHost os command injection | MEDIUM | 5.3 | Jul 28, 2024 |
| CVE-2024-7159 | TOTOLINK A3600R Telnet Service product.ini hard-coded password | MEDIUM | 5.1 | Jul 28, 2024 |
| CVE-2022-36455 | TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi. | HIGH | 7.8 | Aug 25, 2022 |
| CVE-2022-34993 | Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample. | CRITICAL | 9.8 | Aug 4, 2022 |
| CVE-2022-29377 | Totolink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers… | HIGH | 7.5 | May 24, 2022 |
| CVE-2022-25078 | TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers… | CRITICAL | 9.8 | Feb 22, 2022 |
Showing 1 to 25 of 25 CVEs