Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a950rg_firmware:4.1.2cu.5161_b20200903:*:*:*:*:*:*:*

part: o version: 4.1.2cu.5161_b20200903 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA950Rg Firmware (8c0ae15f-0aba-5e14-bb3d-37dbb11132b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-28036 vulnerable 2026-06-08 07:14:55.962744 Details available
TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T14:14:20.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28035 vulnerable 2026-06-08 07:14:55.962391 Details available
TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T14:42:22.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28034 vulnerable 2026-06-08 07:14:55.961478 Details available
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost function through the hostTime parameter.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T15:01:19.895Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28033 vulnerable 2026-06-08 07:14:55.960446 Details available
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpTo parameter.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T14:48:47.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28032 vulnerable 2026-06-08 07:14:55.959570 Details available
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm parameter.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T15:02:25.575Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28029 vulnerable 2026-06-08 07:14:55.957820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28028 vulnerable 2026-06-08 07:14:55.949951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28027 vulnerable 2026-06-08 07:14:55.949141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28026 vulnerable 2026-06-08 07:14:55.948398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28025 vulnerable 2026-06-08 07:14:55.944092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28935 vulnerable 2026-06-08 05:42:46.082923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26214 vulnerable 2026-06-08 05:41:50.753915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26212 vulnerable 2026-06-08 05:41:50.743788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26211 vulnerable 2026-06-08 05:41:50.743210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26210 vulnerable 2026-06-08 05:41:50.742553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26209 vulnerable 2026-06-08 05:41:50.741576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26208 vulnerable 2026-06-08 05:41:50.740998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26207 vulnerable 2026-06-08 05:41:50.740276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26206 vulnerable 2026-06-08 05:41:50.735948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.