Vulnerabilities > Totolink > A7000R Firmware > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-03-16 | CVE-2024-28639 | Classic Buffer Overflow vulnerability in Totolink A7000R Firmware and X5000R Firmware Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service (DoS) via the IP field. | 9.8 |
| 2023-12-11 | CVE-2023-49418 | Out-of-bounds Write vulnerability in Totolink A7000R Firmware 9.1.0U.6115B20201022 TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules. | 9.8 |
| 2023-12-11 | CVE-2023-49417 | Out-of-bounds Write vulnerability in Totolink A7000R Firmware 9.1.0U.6115B20201022 TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg. | 9.8 |
| 2023-10-16 | CVE-2023-45984 | Out-of-bounds Write vulnerability in Totolink A7000R Firmware and X5000R Firmware TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg. | 9.8 |
| 2023-10-16 | CVE-2023-36950 | Out-of-bounds Write vulnerability in Totolink A7000R Firmware and X5000R Firmware TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth. | 9.8 |
| 2023-10-16 | CVE-2023-36947 | Out-of-bounds Write vulnerability in Totolink A7000R Firmware and X5000R Firmware TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule. | 9.8 |
| 2022-08-29 | CVE-2022-32993 | Unspecified vulnerability in Totolink A7000R Firmware 4.1Cu.4134 TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh. | 9.8 |
| 2022-03-15 | CVE-2022-27005 | OS Command Injection vulnerability in Totolink A7000R Firmware and X5000R Firmware Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the setWanCfg function via the hostName parameter. | 9.8 |
| 2022-03-15 | CVE-2022-27004 | OS Command Injection vulnerability in Totolink A7000R Firmware and X5000R Firmware Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6in4 function via the remote6in4 parameter. | 9.8 |
| 2022-03-15 | CVE-2022-27003 | OS Command Injection vulnerability in Totolink A7000R Firmware and X5000R Firmware Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6rd function via the relay6rd parameter. | 9.8 |