Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a3100r_firmware:4.1.2cu.5247_b20211129:*:*:*:*:*:*:*

part: o version: 4.1.2cu.5247_b20211129 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA3100R Firmware (f32d3cf3-391f-5ac4-af17-2e16420de09d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-28256 vulnerable 2026-06-08 07:14:56.067113 Details available
An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file /lib/cste_modules/wireless.so.
Published: 2025-03-28T00:00:00.000Z
Updated: 2025-03-31T21:18:00.722Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28036 vulnerable 2026-06-08 07:14:55.963319 Details available
TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T14:14:20.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28035 vulnerable 2026-06-08 07:14:55.961926 Details available
TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T14:42:22.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28034 vulnerable 2026-06-08 07:14:55.961550 Details available
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost function through the hostTime parameter.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T15:01:19.895Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28033 vulnerable 2026-06-08 07:14:55.960741 Details available
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpTo parameter.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T14:48:47.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28032 vulnerable 2026-06-08 07:14:55.959853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28029 vulnerable 2026-06-08 07:14:55.958065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28028 vulnerable 2026-06-08 07:14:55.957051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28027 vulnerable 2026-06-08 07:14:55.949407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28026 vulnerable 2026-06-08 07:14:55.948753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-28025 vulnerable 2026-06-08 07:14:55.947082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36650 vulnerable 2026-06-08 06:39:45.569676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29646 vulnerable 2026-06-08 05:42:48.723749 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29645 vulnerable 2026-06-08 05:42:48.723261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29644 vulnerable 2026-06-08 05:42:48.722948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29643 vulnerable 2026-06-08 05:42:48.722623 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29642 vulnerable 2026-06-08 05:42:48.722190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29641 vulnerable 2026-06-08 05:42:48.721790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29640 vulnerable 2026-06-08 05:42:48.721444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29639 vulnerable 2026-06-08 05:42:48.720990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29638 vulnerable 2026-06-08 05:42:48.720309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.