TOTOLINK A950RG Firmware 4.1.2cu.5204 B20210112

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a950rg_firmware:4.1.2cu.5204_b20210112:*:*:*:*:*:*:*

part: o version: 4.1.2cu.5204_b20210112 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA950Rg Firmware (8c0ae15f-0aba-5e14-bb3d-37dbb11132b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-67189 vulnerable 2026-06-08 07:41:19.745606 Details available
A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204_B20210112. The urlKeyword parameter is not properly validated, and the function concatenates multiple user-controlled fields into a fixed-size stack buffer without performing boundary checks. A remote attacker can exploit this flaw to cause denial of service or potentially achieve arbitrary code execution.
Published: 2026-02-03T00:00:00.000Z
Updated: 2026-02-09T21:47:58.237Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67188 vulnerable 2026-06-08 07:41:19.745224 Details available
A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The issue resides in the setRadvdCfg interface of the /lib/cste_modules/ipv6.so module. The function fails to properly validate the length of the user-controlled radvdinterfacename parameter, allowing remote attackers to trigger a stack buffer overflow.
Published: 2026-02-03T00:00:00.000Z
Updated: 2026-02-05T14:33:55.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67187 vulnerable 2026-06-08 07:41:19.744701 Details available
A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The flaw exists in the setIpQosRules interface of /lib/cste_modules/firewall.so where the comment parameter is not properly validated for length.
Published: 2026-02-03T00:00:00.000Z
Updated: 2026-02-04T16:21:09.773Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67186 vulnerable 2026-06-08 07:41:19.743320 Details available
TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cste_modules/firewall.so. The vulnerability occurs because the `url` parameter is not properly validated for length, allowing remote attackers to trigger a buffer overflow, potentially leading to arbitrary code execution or denial of service.
Published: 2026-02-03T00:00:00.000Z
Updated: 2026-02-04T16:24:12.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-45800 vulnerable 2026-06-08 07:25:11.102505 Details available
TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/global.so library, specifically in the processing of the deviceMac parameter.
Published: 2025-05-02T00:00:00.000Z
Updated: 2025-05-12T15:56:29.503Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-45798 vulnerable 2026-06-08 07:25:11.102210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-45797 vulnerable 2026-06-08 07:25:11.101793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36612 vulnerable 2026-06-08 05:46:07.607180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25082 vulnerable 2026-06-08 05:41:45.165614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.