Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a800r_firmware:4.1.2cu.5137_b20200730:*:*:*:*:*:*:*

part: o version: 4.1.2cu.5137_b20200730 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA800R Firmware (295d3e64-f920-5b50-b030-61fa4a80570c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-28138 vulnerable 2026-06-08 07:14:56.020730 Details available
The TOTOLINK A800R V4.1.2cu.5137_B20200730 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
Published: 2025-03-27T00:00:00.000Z
Updated: 2025-04-15T14:12:34.790Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28136 vulnerable 2026-06-08 07:14:56.020150 Details available
TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi.
Published: 2025-04-15T00:00:00.000Z
Updated: 2025-04-15T20:28:09.292Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28036 vulnerable 2026-06-08 07:14:55.962826 Details available
TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T14:14:20.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28035 vulnerable 2026-06-08 07:14:55.962125 Details available
TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T14:42:22.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28034 vulnerable 2026-06-08 07:14:55.961083 Details available
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost function through the hostTime parameter.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T15:01:19.895Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28033 vulnerable 2026-06-08 07:14:55.960323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28032 vulnerable 2026-06-08 07:14:55.959452 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28020 vulnerable 2026-06-08 07:14:55.936011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28019 vulnerable 2026-06-08 07:14:55.935399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28018 vulnerable 2026-06-08 07:14:55.934895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36611 vulnerable 2026-06-08 05:46:07.604508 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28935 vulnerable 2026-06-08 05:42:46.084510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26214 vulnerable 2026-06-08 05:41:50.753949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26212 vulnerable 2026-06-08 05:41:50.743822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26211 vulnerable 2026-06-08 05:41:50.743243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26210 vulnerable 2026-06-08 05:41:50.742586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26209 vulnerable 2026-06-08 05:41:50.741754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26208 vulnerable 2026-06-08 05:41:50.741032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26207 vulnerable 2026-06-08 05:41:50.740311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26206 vulnerable 2026-06-08 05:41:50.737175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.