A830r Firmware vulnerabilities

20 known vulnerabilities in A830r Firmware from TOTOLINK. 20 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

20vulnerabilities

12critical

8high

0exploited

8.8average CVSS score

Latest first

7.3 High severity
A830r Firmware: Buffer Copy without Checking Size of Input
CVE-2025-28028Apr 23, 2025TOTOLINK
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v5 parameter.
7.3 High severity
A830r Firmware: Buffer Copy without Checking Size of Input
CVE-2025-28025Apr 23, 2025TOTOLINK
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.
9.8 Critical severity
A950rg Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-28036Apr 22, 2025TOTOLINKEPSS 1.36%
TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-28035Apr 22, 2025TOTOLINKEPSS 1.36%
TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
7.3 High severity
A830r Firmware: Stack-based Buffer Overflow
CVE-2025-28029Apr 22, 2025TOTOLINK
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in cstecgi.cgi
7.3 High severity
A830r Firmware: Stack-based Buffer Overflow
CVE-2025-28027Apr 22, 2025TOTOLINK
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow vulnerability in downloadFile.cgi.
7.3 High severity
A830r Firmware: Stack-based Buffer Overflow
CVE-2025-28026Apr 22, 2025TOTOLINK
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi.
9.8 Critical severity
A800r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-28034Apr 22, 2025TOTOLINKEPSS 1.36%
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vul
7.3 High severity
A800r Firmware: Stack-based Buffer Overflow
CVE-2025-28033Apr 22, 2025TOTOLINK
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerabilit
7.3 High severity
A800r Firmware: Stack-based Buffer Overflow
CVE-2025-28032Apr 22, 2025TOTOLINK
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNo
7.2 High severity
A830r Firmware: Improper Neutralization of Special Elements used in a Command
CVE-2022-28935Jul 6, 2022TOTOLINKEPSS 3.3%
Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU V5.9c.5185_B20201128, Totolink A810R V4.1.2cu.5182_B20201026 were discovered to cont
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26214Mar 15, 2022TOTOLINKEPSS 2.78%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26212Mar 15, 2022TOTOLINKEPSS 2.78%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26211Mar 15, 2022TOTOLINKEPSS 2.78%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26210Mar 15, 2022TOTOLINKEPSS 5.69%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26209Mar 15, 2022TOTOLINKEPSS 2.22%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26208Mar 15, 2022TOTOLINKEPSS 2.78%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26207Mar 15, 2022TOTOLINKEPSS 2.22%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26206Mar 15, 2022TOTOLINKEPSS 2.22%
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in
9.8 Critical severity
A830r Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-25080Feb 24, 2022TOTOLINKEPSS 2.77%
TOTOLink A830R V5.9c.4729_B20191112 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.