Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a830r_firmware:5.9c.4729_b20191112:*:*:*:*:*:*:*

part: o version: 5.9c.4729_b20191112 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA830R Firmware (4d9392b0-8506-5b9d-a7fa-0e63c6721659)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-28935 vulnerable 2026-06-08 05:42:46.080440 Details available
Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU V5.9c.5185_B20201128, Totolink A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability.
Published: 2022-07-06T12:24:38.000Z
Updated: 2024-08-03T06:10:57.513Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26214 vulnerable 2026-06-08 05:41:50.753729 Details available
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the host_time parameter.
Published: 2022-03-15T21:56:18.000Z
Updated: 2024-08-03T04:56:37.913Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26212 vulnerable 2026-06-08 05:41:50.743712 Details available
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setDeviceName, via the deviceMac and deviceName parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2022-03-15T21:56:17.000Z
Updated: 2024-08-03T04:56:37.880Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26211 vulnerable 2026-06-08 05:41:50.743135 Details available
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function CloudACMunualUpdate, via the deviceMac and deviceName parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2022-03-15T21:56:17.000Z
Updated: 2024-08-03T04:56:37.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26210 vulnerable 2026-06-08 05:41:50.742477 Details available
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setUpgradeFW, via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2022-03-15T21:56:16.000Z
Updated: 2024-08-03T04:56:37.896Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26209 vulnerable 2026-06-08 05:41:50.741503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26208 vulnerable 2026-06-08 05:41:50.740922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26207 vulnerable 2026-06-08 05:41:50.740191 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26206 vulnerable 2026-06-08 05:41:50.734194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25080 vulnerable 2026-06-08 05:41:45.161302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44247 vulnerable 2026-06-08 05:36:45.612467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44246 vulnerable 2026-06-08 05:36:45.610025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.