TOTOLINK A860R Firmware 4.1.2cu.5182 B20201027
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:a860r_firmware:4.1.2cu.5182_b20201027:*:*:*:*:*:*:*
part: o version: 4.1.2cu.5182_b20201027 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | A860R Firmware (7464c074-2e0f-5fe0-9b03-948d3e71eb03) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-40475 |
vulnerable | 2026-06-08 05:48:24.976559 |
Details available
TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi.
Published: 2022-09-29T11:37:10.000Z
Updated: 2025-05-21T14:21:27.445Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37843 |
vulnerable | 2026-06-08 05:47:13.099893 |
Details available
In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without filtering, resulting in a command injection vulnerability.
Published: 2022-09-06T16:34:56.000Z
Updated: 2024-08-03T10:37:42.141Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37842 |
vulnerable | 2026-06-08 05:47:13.099515 |
Details available
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability.
Published: 2022-09-06T16:43:02.000Z
Updated: 2024-08-03T10:37:42.331Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37841 |
vulnerable | 2026-06-08 05:47:13.099029 |
Details available
In TOTOLINK A860R V4.1.2cu.5182_B20201027 there is a hard coded password for root in /etc/shadow.sample.
Published: 2022-09-06T16:39:42.000Z
Updated: 2024-08-03T10:37:41.614Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37840 |
vulnerable | 2026-06-08 05:47:13.098489 |
Details available
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability.
Published: 2022-09-06T16:40:44.000Z
Updated: 2024-08-03T10:37:41.896Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37839 |
vulnerable | 2026-06-08 05:47:13.097235 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36614 |
vulnerable | 2026-06-08 05:46:07.611794 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25083 |
vulnerable | 2026-06-08 05:41:45.168525 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.