Approved changes feed: RSS · Atom

cpe:2.3:h:totolink:a800r:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA800R (b21fd6d7-aa07-5e71-9b2c-abee016ae606)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4496 not_vulnerable 2026-06-08 07:29:16.336065 TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-10T05:00:10.763Z
Updated: 2025-05-12T19:30:55.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28138 not_vulnerable 2026-06-08 07:14:56.020753 Details available
The TOTOLINK A800R V4.1.2cu.5137_B20200730 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
Published: 2025-03-27T00:00:00.000Z
Updated: 2025-04-15T14:12:34.790Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28136 not_vulnerable 2026-06-08 07:14:56.020177 Details available
TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi.
Published: 2025-04-15T00:00:00.000Z
Updated: 2025-04-15T20:28:09.292Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28036 not_vulnerable 2026-06-08 07:14:55.962936 Details available
TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T14:14:20.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28035 not_vulnerable 2026-06-08 07:14:55.962141 Details available
TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T14:42:22.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28034 not_vulnerable 2026-06-08 07:14:55.961215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28033 not_vulnerable 2026-06-08 07:14:55.960347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28032 not_vulnerable 2026-06-08 07:14:55.959476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28020 not_vulnerable 2026-06-08 07:14:55.936034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28019 not_vulnerable 2026-06-08 07:14:55.935502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28018 not_vulnerable 2026-06-08 07:14:55.934945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28017 not_vulnerable 2026-06-08 07:14:55.933370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36611 not_vulnerable 2026-06-08 05:46:07.605315 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28935 not_vulnerable 2026-06-08 05:42:46.085032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26214 not_vulnerable 2026-06-08 05:41:50.753966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26212 not_vulnerable 2026-06-08 05:41:50.743839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26211 not_vulnerable 2026-06-08 05:41:50.743259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26210 not_vulnerable 2026-06-08 05:41:50.742602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26209 not_vulnerable 2026-06-08 05:41:50.741781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26208 not_vulnerable 2026-06-08 05:41:50.741049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26207 not_vulnerable 2026-06-08 05:41:50.740327 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26206 not_vulnerable 2026-06-08 05:41:50.737225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25076 not_vulnerable 2026-06-08 05:41:45.153587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.