A810r Firmware vulnerabilities

20 known vulnerabilities in A810r Firmware from TOTOLINK. 20 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

20vulnerabilities

15critical

5high

0exploited

9.3average CVSS score

Latest first

9.8 Critical severity
T10: Buffer Copy without Checking Size of Input
CVE-2025-4496May 10, 2025TOTOLINKEPSS 1.25%
A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation
9.8 Critical severity
A950rg Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-28036Apr 22, 2025TOTOLINKEPSS 1.36%
TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-28035Apr 22, 2025TOTOLINKEPSS 1.36%
TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
9.8 Critical severity
A810r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-28037Apr 22, 2025TOTOLINKEPSS 1.23%
TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the setDiagnosisCfg function through the ipDomain parameter.
8.8 High severity
A810r Firmware: Stack-based Buffer Overflow
CVE-2025-28030Apr 22, 2025TOTOLINK
TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a stack overflow via the startTime and endTime parameters in setParentalRules function.
9.8 Critical severity
A800r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-28034Apr 22, 2025TOTOLINKEPSS 1.36%
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vul
7.3 High severity
A800r Firmware: Stack-based Buffer Overflow
CVE-2025-28033Apr 22, 2025TOTOLINK
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerabilit
7.3 High severity
A800r Firmware: Stack-based Buffer Overflow
CVE-2025-28032Apr 22, 2025TOTOLINK
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNo
9.8 Critical severity
A810r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-28137Apr 15, 2025TOTOLINKEPSS 34.1%
The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
8.1 High severity
A810r Firmware: Improper Neutralization of Special Elements used in a Command
CVE-2024-57036Jan 21, 2025TOTOLINK
TOTOLINK A810R V4.1.2cu.5032_B20200407 was found to contain a command insertion vulnerability in downloadFile.cgi main function. This vulnerability allows an attacker to execute arbitrary commands by sending HTTP request.
7.2 High severity
A830r Firmware: Improper Neutralization of Special Elements used in a Command
CVE-2022-28935Jul 6, 2022TOTOLINKEPSS 3.3%
Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU V5.9c.5185_B20201128, Totolink A810R V4.1.2cu.5182_B20201026 were discovered to cont
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26214Mar 15, 2022TOTOLINKEPSS 2.78%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26212Mar 15, 2022TOTOLINKEPSS 2.78%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26211Mar 15, 2022TOTOLINKEPSS 2.78%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26210Mar 15, 2022TOTOLINKEPSS 5.69%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26209Mar 15, 2022TOTOLINKEPSS 2.22%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26208Mar 15, 2022TOTOLINKEPSS 2.78%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26207Mar 15, 2022TOTOLINKEPSS 2.22%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26206Mar 15, 2022TOTOLINKEPSS 2.22%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A810r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-25079Feb 24, 2022TOTOLINKEPSS 2.77%
TOTOLink A810R V4.1.2cu.5182_B20201026 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.