Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a720r_firmware:4.1.5cu.470_b20200911:*:*:*:*:*:*:*

part: o version: 4.1.5cu.470_b20200911 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA720R Firmware (d1104648-da81-579d-8c5c-74775ce3008b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-45742 vulnerable 2026-06-08 05:36:49.365596 Details available
TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.
Published: 2022-02-04T01:33:51.000Z
Updated: 2024-08-04T04:47:02.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45740 vulnerable 2026-06-08 05:36:49.364793 Details available
TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the pin parameter.
Published: 2022-02-04T01:33:52.000Z
Updated: 2024-08-04T04:47:02.051Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45739 vulnerable 2026-06-08 05:36:49.364375 Details available
TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the flag parameter.
Published: 2022-02-04T01:33:53.000Z
Updated: 2024-08-04T04:47:01.996Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45737 vulnerable 2026-06-08 05:36:49.363669 Details available
TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the Host parameter.
Published: 2022-02-04T01:33:54.000Z
Updated: 2024-08-04T04:47:02.022Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44247 vulnerable 2026-06-08 05:36:45.612423 Details available
Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection vulnerability in the function setNoticeCfg. This vulnerability allows attackers to execute arbitrary commands via the IpFrom parameter.
Published: 2022-02-04T01:34:03.000Z
Updated: 2024-08-04T04:17:24.828Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44246 vulnerable 2026-06-08 05:36:45.608431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43662 vulnerable 2026-06-08 05:36:43.663714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35327 vulnerable 2026-06-08 05:32:48.639950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35326 vulnerable 2026-06-08 05:32:48.639541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35325 vulnerable 2026-06-08 05:32:48.639108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35324 vulnerable 2026-06-08 05:32:48.637623 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27710 vulnerable 2026-06-08 05:31:22.083538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27708 vulnerable 2026-06-08 05:31:22.082318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.