Approved changes feed: RSS · Atom

cpe:2.3:h:totolink:a7000r:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA7000R (fa8d1f7d-b914-535f-a0c5-0b120a7cfa38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1623 not_vulnerable 2026-06-08 07:49:09.042524 Totolink A7000R cstecgi.cgi setUpgradeFW command injection
MEDIUM (6.3)
A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument FileName causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-01-29T20:32:08.374Z
Updated: 2026-02-23T09:07:06.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1601 not_vulnerable 2026-06-08 07:49:08.990554 Totolink A7000R cstecgi.cgi setUploadUserData command injection
MEDIUM (6.3)
A weakness has been identified in Totolink A7000R 4.1cu.4154. The impacted element is the function setUploadUserData of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument FileName can lead to command injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-01-29T18:32:07.938Z
Updated: 2026-02-23T09:06:35.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1548 not_vulnerable 2026-06-08 07:49:08.868692 Totolink A7000R cstecgi.cgi CloudACMunualUpdateUserdata command injection
MEDIUM (6.3)
A flaw has been found in Totolink A7000R 4.1cu.4154. This impacts the function CloudACMunualUpdateUserdata of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument url causes command injection. The attack can be initiated remotely. The exploit has been published and may be used.
Published: 2026-01-28T22:32:08.747Z
Updated: 2026-02-23T09:02:35.766Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1547 not_vulnerable 2026-06-08 07:49:08.867862 Totolink A7000R cstecgi.cgi setUnloadUserData command injection
MEDIUM (6.3)
A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument plugin_name results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
Published: 2026-01-28T22:02:10.788Z
Updated: 2026-02-23T09:02:20.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63462 not_vulnerable 2026-06-08 07:39:17.616877 Details available
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Published: 2025-10-31T00:00:00.000Z
Updated: 2025-11-03T14:53:45.168Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63461 not_vulnerable 2026-06-08 07:39:17.616525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63460 not_vulnerable 2026-06-08 07:39:17.616144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63459 not_vulnerable 2026-06-08 07:39:17.615757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63154 not_vulnerable 2026-06-08 07:39:17.286263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63153 not_vulnerable 2026-06-08 07:39:17.285768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-51452 not_vulnerable 2026-06-08 07:31:11.195852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7213 not_vulnerable 2026-06-08 06:58:21.533244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7212 not_vulnerable 2026-06-08 06:58:21.532310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28640 not_vulnerable 2026-06-08 06:33:27.092035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28639 not_vulnerable 2026-06-08 06:33:27.091328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49418 not_vulnerable 2026-06-08 06:14:29.086631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49417 not_vulnerable 2026-06-08 06:14:29.086121 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45985 not_vulnerable 2026-06-08 06:12:43.668677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45984 not_vulnerable 2026-06-08 06:12:43.667629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36950 not_vulnerable 2026-06-08 06:08:14.732110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36947 not_vulnerable 2026-06-08 06:08:14.731160 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37084 not_vulnerable 2026-06-08 05:46:08.620062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37083 not_vulnerable 2026-06-08 05:46:08.619674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37082 not_vulnerable 2026-06-08 05:46:08.619397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37081 not_vulnerable 2026-06-08 05:46:08.618929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37080 not_vulnerable 2026-06-08 05:46:08.618644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37079 not_vulnerable 2026-06-08 05:46:08.618278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37078 not_vulnerable 2026-06-08 05:46:08.617894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37077 not_vulnerable 2026-06-08 05:46:08.617436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37076 not_vulnerable 2026-06-08 05:46:08.617030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37075 not_vulnerable 2026-06-08 05:46:08.616426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32993 not_vulnerable 2026-06-08 05:44:46.127976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27005 not_vulnerable 2026-06-08 05:41:54.753018 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27004 not_vulnerable 2026-06-08 05:41:54.752377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27003 not_vulnerable 2026-06-08 05:41:54.751468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.