Note:
This project will be discontinued after December 13, 2021. [more]
Product:
A3700r_firmware
(Totolink)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 33 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2022-08-25 | CVE-2022-36461 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg. | A3700r_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36462 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg. | A3700r_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36463 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg. | A3700r_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36464 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules. | A3700r_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36465 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter. | A3700r_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36466 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg. | A3700r_firmware | 7.8 | ||
| 2023-09-25 | CVE-2023-43141 | TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control. | A3700r_firmware, N600r_firmware | 9.8 | ||
| 2023-10-25 | CVE-2023-46574 | An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function. | A3700r_firmware | 9.8 | ||
| 2023-11-20 | CVE-2023-48192 | An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function. | A3700r_firmware | 7.8 | ||
| 2023-12-22 | CVE-2023-50147 | There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlink A3700R router device in its firmware version V9.1.2u.5822_B20200513. | A3700r_firmware | 9.8 |