A3300r Firmware vulnerabilities

42 known vulnerabilities in A3300r Firmware from TOTOLINK. 42 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  a3300r: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-37171Jul 7, 2023TOTOLINKEPSS 1.96%

  TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function.

• 9.8 Critical severity

  a3300r: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-37170Jul 7, 2023TOTOLINKEPSS 1.68%

  TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function.