Approved changes feed: RSS · Atom

cpe:2.3:h:totolink:a6000r:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA6000R (2dcd9301-6c14-5600-99e2-5918dc261700)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3249 not_vulnerable 2026-06-08 07:23:08.541698 TOTOLINK A6000R mtkwifi.lua apcli_cancel_wps command injection
MEDIUM (6.3)
A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability is the function apcli_cancel_wps of the file /usr/lib/lua/luci/controller/mtkwifi.lua. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-04T14:00:15.508Z
Updated: 2025-04-04T14:29:11.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-57214 not_vulnerable 2026-06-08 06:56:13.417930 Details available
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.
Published: 2025-01-10T00:00:00.000Z
Updated: 2025-01-14T16:57:39.754Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-57213 not_vulnerable 2026-06-08 06:56:13.417514 Details available
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the action_passwd function.
Published: 2025-01-10T00:00:00.000Z
Updated: 2025-01-13T15:41:01.704Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-57212 not_vulnerable 2026-06-08 06:56:13.416833 Details available
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the action_reboot function.
Published: 2025-01-10T00:00:00.000Z
Updated: 2025-01-14T15:26:01.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-57211 not_vulnerable 2026-06-08 06:56:13.416414 Details available
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function.
Published: 2025-01-10T00:00:00.000Z
Updated: 2025-01-15T20:27:42.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41320 not_vulnerable 2026-06-08 06:43:54.350277 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41319 not_vulnerable 2026-06-08 06:43:54.349907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41318 not_vulnerable 2026-06-08 06:43:54.349482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41317 not_vulnerable 2026-06-08 06:43:54.348852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41316 not_vulnerable 2026-06-08 06:43:54.348313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41315 not_vulnerable 2026-06-08 06:43:54.339157 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41314 not_vulnerable 2026-06-08 06:43:54.338406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37626 not_vulnerable 2026-06-08 06:39:47.992877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.