Approved changes feed: RSS · Atom

cpe:2.3:h:totolink:a860r:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA860R (27955d6e-7bcf-5dfe-bc08-8eb3567a6970)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-40475 not_vulnerable 2026-06-08 05:48:24.977168 Details available
TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi.
Published: 2022-09-29T11:37:10.000Z
Updated: 2025-05-21T14:21:27.445Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37843 not_vulnerable 2026-06-08 05:47:13.099999 Details available
In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without filtering, resulting in a command injection vulnerability.
Published: 2022-09-06T16:34:56.000Z
Updated: 2024-08-03T10:37:42.141Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37842 not_vulnerable 2026-06-08 05:47:13.099539 Details available
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability.
Published: 2022-09-06T16:43:02.000Z
Updated: 2024-08-03T10:37:42.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37841 not_vulnerable 2026-06-08 05:47:13.099053 Details available
In TOTOLINK A860R V4.1.2cu.5182_B20201027 there is a hard coded password for root in /etc/shadow.sample.
Published: 2022-09-06T16:39:42.000Z
Updated: 2024-08-03T10:37:41.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37840 not_vulnerable 2026-06-08 05:47:13.098625 Details available
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability.
Published: 2022-09-06T16:40:44.000Z
Updated: 2024-08-03T10:37:41.896Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37839 not_vulnerable 2026-06-08 05:47:13.097999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36614 not_vulnerable 2026-06-08 05:46:07.612470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25083 not_vulnerable 2026-06-08 05:41:45.169174 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.