Login Request a demo
AF
Product
A3100r Firmware
by Totolink · last CVE May 10, 2025
47
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities47In the news0Timeline
Severity mix
Critical 25High 20Medium 2Low 0
Severity
All severities47Critical25High20Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add A3100r Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-4496
9.8
1%
May 10
TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow
Affected: 4.1.8cu.5241_b20210927
CVE-2025-45790
9.8
1%
May 8
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cste_modules/firewall.so
Affected: 5.9c.1527
CVE-2025-45787
9.8
1%
May 8
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules
Affected: 5.9c.1527
CVE-2025-45788
9.8
1%
May 8
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules
Affected: 5.9c.1527
CVE-2025-45789
9.8
1%
May 8
TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules
Affected: 5.9c.1527
CVE-2025-28034
9.8
1%
Apr 22
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R…
Affected: 4.1.2cu.5247_b20211129
CVE-2025-28035
9.8
1%
Apr 22
TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter
Affected: 4.1.2cu.5247_b20211129
CVE-2025-28036
9.8
1%
Apr 22
TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter
Affected: 4.1.2cu.5247_b20211129
CVE-2025-28256
9.8
1%
Mar 28
An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file /lib/cste_modules/wireless.so
Affected: 4.1.2cu.5247_b20211129
CVE-2024-42547
9.8
1%
Aug 12
TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the http_host parameter in the loginauth function
Affected: 4.1.2cu.5050_b20200504
CVE-2024-42546
9.8
1%
Aug 12
TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the password parameter in the loginauth function
Affected: 4.1.2cu.5050_b20200504
CVE-2022-29645
9.8
1%
May 18
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample
Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2022-29644
9.8
2%
May 18
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for the telnet service stored in the component…
Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2021-46009
9.8
13%
Mar 30
In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication
Affected: 5.9c.4577
CVE-2022-26214
9.8
3%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5050_b20200504
CVE-2022-26212
9.8
3%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5050_b20200504
CVE-2022-26211
9.8
3%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5050_b20200504
CVE-2022-26210
9.8
6%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5050_b20200504
CVE-2022-26209
9.8
2%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5050_b20200504
CVE-2022-26208
9.8
3%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5050_b20200504
CVE-2022-26207
9.8
2%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5050_b20200504
CVE-2022-26206
9.8
2%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5050_b20200504
CVE-2021-44620
9.8
1%
Mar 11
A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime parameters
Affected: through 4.1.2cu.5050_b20200504
CVE-2022-25077
9.8
30%
Feb 24
TOTOLink A3100R V4.1.2cu.5050_B20200504 was discovered to contain a command injection vulnerability in the "Main" function
Affected: 4.1.2cu.5050_b20200504
CVE-2021-44247
9.8
3%
Feb 4
Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection vulnerability in the…
Affected: 4.1.2cu.5050_b20200504
CVE-2024-7158
8.8
3%
Jul 28
A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504
Affected: 4.1.2cu.5050_b20200504
CVE-2024-7157
8.8
7%
Jul 28
A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504
Affected: 4.1.2cu.5050_b20200504
CVE-2021-46010
8.8
1%
Mar 30
Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration
Affected: 5.9c.4577
CVE-2021-46008
8.8
1%
Mar 30
In totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official released firmware
Affected: 5.9c.4577
CVE-2022-29639
8.1
2%
May 18
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a command injection vulnerability via the magicid parameter in the function…
Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2024-36650
7.5
1%
Jun 11
TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file `/lib/cste_modules/system.so`, the length…
Affected: 4.1.2cu.5247_b20211129
CVE-2022-29643
7.5
1%
May 18
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos
Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2022-29642
7.5
1%
May 18
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the url parameter in the function setUrlFilterRules
Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2022-29641
7.5
1%
May 18
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function…
Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2022-29640
7.5
1%
May 18
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setPortForwardRules
Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2022-29638
7.5
1%
May 18
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setIpQosRules
Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2021-44246
7.5
1%
Feb 4
Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in the function…
Affected: 4.1.2cu.5050_b20200504
CVE-2025-28028
7.3
0%
Apr 23
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow…
Affected: 4.1.2cu.5247_b20211129
CVE-2025-28025
7.3
0%
Apr 23
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow…
Affected: 4.1.2cu.5247_b20211129
CVE-2025-28027
7.3
0%
Apr 22
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow…
Affected: 4.1.2cu.5247_b20211129
CVE-2025-28032
7.3
0%
Apr 22
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R…
Affected: 4.1.2cu.5247_b20211129
CVE-2025-28033
7.3
0%
Apr 22
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R…
Affected: 4.1.2cu.5247_b20211129
CVE-2025-28026
7.3
0%
Apr 22
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow…
Affected: 4.1.2cu.5247_b20211129
CVE-2025-28029
7.3
0%
Apr 22
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow…
Affected: 4.1.2cu.5247_b20211129
CVE-2022-28935
7.2
3%
Jul 6
Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU…
Affected: 4.1.2cu.5050_b20200504
CVE-2021-46006
6.5
6%
Mar 30
In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated
Affected: 5.9c.4577
CVE-2022-29646
5.3
1%
May 18
An access control issue in TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 allows attackers to obtain sensitive information via a crafted web request
Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
Showing 47