A7000R Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:a7000r_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | A7000R Firmware (ecc35aef-7fb0-535d-bce0-41aebd726a15) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6168 |
vulnerable | 2026-06-08 08:07:04.519627 |
TOTOLINK A7000R cstecgi.cgi setWiFiEasyGuestCfg stack-based overflow
HIGH (8.8)
A flaw has been found in TOTOLINK A7000R up to 9.1.0u.6115. The affected element is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ssid5g causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Published: 2026-04-13T06:30:14.050Z
Updated: 2026-04-16T13:26:41.857Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1623 |
vulnerable | 2026-06-08 07:49:09.042324 |
Totolink A7000R cstecgi.cgi setUpgradeFW command injection
MEDIUM (6.3)
A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument FileName causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-01-29T20:32:08.374Z
Updated: 2026-02-23T09:07:06.095Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1601 |
vulnerable | 2026-06-08 07:49:08.990382 |
Totolink A7000R cstecgi.cgi setUploadUserData command injection
MEDIUM (6.3)
A weakness has been identified in Totolink A7000R 4.1cu.4154. The impacted element is the function setUploadUserData of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument FileName can lead to command injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-01-29T18:32:07.938Z
Updated: 2026-02-23T09:06:35.690Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1548 |
vulnerable | 2026-06-08 07:49:08.868443 |
Totolink A7000R cstecgi.cgi CloudACMunualUpdateUserdata command injection
MEDIUM (6.3)
A flaw has been found in Totolink A7000R 4.1cu.4154. This impacts the function CloudACMunualUpdateUserdata of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument url causes command injection. The attack can be initiated remotely. The exploit has been published and may be used.
Published: 2026-01-28T22:32:08.747Z
Updated: 2026-02-23T09:02:35.766Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1547 |
vulnerable | 2026-06-08 07:49:08.866047 |
Totolink A7000R cstecgi.cgi setUnloadUserData command injection
MEDIUM (6.3)
A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument plugin_name results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
Published: 2026-01-28T22:02:10.788Z
Updated: 2026-02-23T09:02:20.499Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.