Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a3600r_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA3600R Firmware (b9edbc16-e957-595e-bd9b-212416f0e36a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5020 vulnerable 2026-06-08 08:07:02.876264 Totolink A3600R Parameter cstecgi.cgi setNoticeCfg command injection
MEDIUM (6.3)
A vulnerability was detected in Totolink A3600R 4.1.2cu.5182_B20201102. Affected by this issue is the function setNoticeCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. The manipulation of the argument NoticeUrl results in command injection. The attack may be launched remotely. The exploit is now public and may be used.
Published: 2026-03-29T00:30:15.157Z
Updated: 2026-04-01T14:20:46.528Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1686 vulnerable 2026-06-08 07:49:09.361021 Totolink A3600R app.so setAppEasyWizardConfig buffer overflow
HIGH (8.8)
A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so. Performing a manipulation of the argument apcliSsid results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-01-30T15:02:08.241Z
Updated: 2026-02-23T09:09:13.406Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.