TOTOLINK vulnerabilities
We track 806 vulnerabilities in TOTOLINK products across 60+ products. 806 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2026.
Latest TOTOLINK vulnerabilities
- 9.8 Critical severity
X6000r Firmware: Improper Neutralization of Special Elements used in an OS Command
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
- 9.8 Critical severity
X6000r Firmware: Improper Neutralization of Special Elements used in an OS Command
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
- 9.8 Critical severity
X6000r Firmware: Improper Neutralization of Special Elements used in an OS Command
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
- 9.8 Critical severity
X6000r Firmware: Improper Neutralization of Special Elements used in an OS Command
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
- 9.8 Critical severity
X6000r Firmware: Improper Neutralization of Special Elements used in an OS Command
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
- 9.8 Critical severity
X6000r Firmware: Improper Neutralization of Special Elements used in an OS Command
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
- 9.8 Critical severity
X6000r Firmware: Improper Neutralization of Special Elements used in an OS Command
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
- 9.8 Critical severity
x6000r_firmware: Improper Neutralization of Special Elements used in a Command
An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component.
- 9.8 Critical severity
a3300r_firmware: Improper Neutralization of Special Elements used in a Command
In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command injection.
- 7.5 High severity
a3300r_firmware: Incorrect Authorization
TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control. Attackers are able to reset serveral critical passwords without authentication by visiting specific pages.
- 9.8 Critical severity
x6000r_firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK X6000R V9.4.0cu.852_B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfg function.
- 7.5 High severity
x6000r_firmware: Missing Authentication for Critical Functionality
TOTOLINK X6000R V9.4.0cu.852_B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authentication.
- 9.8 Critical severity
a3700r_firmware: Improper Neutralization of Special Elements used in a Command
An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function.
- 7.5 High severity
X5000r Firmware: Out-of-bounds Write
TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
- 9.8 Critical severity
x5000r_firmware: Out-of-bounds Write
TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.
- 9.8 Critical severity
x5000r_firmware: Out-of-bounds Write
TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.
- 9.8 Critical severity
x5000r_firmware: Out-of-bounds Write
TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.
- 8.8 High severity
N200RE V5: Use of Externally-Controlled Format String
A vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437_B20230519. This affects the function Validity_check. The manipulation leads to format string. It is possible to initiate the attack remotely. The root-cause of the vulnerab
- 9.8 Critical severity
x5000r: Improper Neutralization of Special Elements used in a Command
TOTOLINK X5000R_V9.1.0cu.2089_B20211224 and X5000R_V9.1.0cu.2350_B20230313 were discovered to contain a remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function.
- 9.8 Critical severity
EX1200L: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects the function setWanCfg. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed
- 9.8 Critical severity
EX1200L: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit
- 9.8 Critical severity
EX1200L: Improper Neutralization of Special Elements used in an OS Command
A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023. This affects the function setDiagnosisCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit h
- 9.8 Critical severity
t10_v2: Out-of-bounds Write
TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste_modules/lan.so. Attackers can send crafted data in an MQTT packet, via the comment parameter, to control the return address and execute code.
- 9.8 Critical severity
t10_v2: Out-of-bounds Write
TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so. Attackers can send crafted data in an MQTT packet, via the pin parameter, to control the return address and execute code.
- 7.5 High severity
cp300\+: Observable Discrepancy
TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.
- 9.8 Critical severity
a3000ru: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function.
- 9.8 Critical severity
a3000ru: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function.
- 9.8 Critical severity
a3300r: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function.
- 9.8 Critical severity
a3300r: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function.
- 9.8 Critical severity
lr350: Improper Neutralization of Special Elements used in a Command
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function.
- 9.8 Critical severity
lr350: Improper Neutralization of Special Elements used in a Command
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.
- 9.8 Critical severity
lr350: Improper Neutralization of Special Elements used in a Command
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function.
- 9.8 Critical severity
A7100ru Firmware: Improper Neutralization of Special Elements used in a Command
TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg.
- 9.8 Critical severity
X5000r Firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vulnerability allows an attacker to execute arbitrary commands through the "ip" parameter.
- 9.8 Critical severity
X5000r Firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allows an attacker to execute arbitrary commands through the "hostName" parameter.
- 8.8 High severity
X5000r Firmware: Out-of-bounds Write
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via parameter sPort/ePort in the addEffect function.
- 9.8 Critical severity
Cp300+ Firmware: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands via a crafted http packet.
- 9.8 Critical severity
A7100ru Firmware: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability. An attacker can obtain a stable root shell through a specially constructed payload.
- 9.8 Critical severity
X5000r Firmware: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.
- 9.8 Critical severity
X18 Firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function.