A3100r Firmware vulnerabilities | LiveThreat CVE Feed

Product

A3100r Firmware

by Totolink · last CVE May 10, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities47 In the news0 Timeline

Severity mix

Critical 25High 20Medium 2Low 0

Severity

All severities47 Critical25 High20 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add A3100r Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-4496	9.8	1%	May 10	TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow Affected: 4.1.8cu.5241_b20210927
CVE-2025-45790	9.8	1%	May 8	TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cste_modules/firewall.so Affected: 5.9c.1527
CVE-2025-45787	9.8	1%	May 8	TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules Affected: 5.9c.1527
CVE-2025-45788	9.8	1%	May 8	TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules Affected: 5.9c.1527
CVE-2025-45789	9.8	1%	May 8	TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules Affected: 5.9c.1527
CVE-2025-28034	9.8	1%	Apr 22	TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R… Affected: 4.1.2cu.5247_b20211129
CVE-2025-28035	9.8	1%	Apr 22	TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter Affected: 4.1.2cu.5247_b20211129
CVE-2025-28036	9.8	1%	Apr 22	TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter Affected: 4.1.2cu.5247_b20211129
CVE-2025-28256	9.8	1%	Mar 28	An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file /lib/cste_modules/wireless.so Affected: 4.1.2cu.5247_b20211129
CVE-2024-42547	9.8	1%	Aug 12	TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the http_host parameter in the loginauth function Affected: 4.1.2cu.5050_b20200504
CVE-2024-42546	9.8	1%	Aug 12	TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the password parameter in the loginauth function Affected: 4.1.2cu.5050_b20200504
CVE-2022-29645	9.8	1%	May 18	TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2022-29644	9.8	2%	May 18	TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for the telnet service stored in the component… Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2021-46009	9.8	13%	Mar 30	In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication Affected: 5.9c.4577
CVE-2022-26214	9.8	3%	Mar 15	Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5050_b20200504
CVE-2022-26212	9.8	3%	Mar 15	Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5050_b20200504
CVE-2022-26211	9.8	3%	Mar 15	Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5050_b20200504
CVE-2022-26210	9.8	6%	Mar 15	Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5050_b20200504
CVE-2022-26209	9.8	2%	Mar 15	Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5050_b20200504
CVE-2022-26208	9.8	3%	Mar 15	Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5050_b20200504
CVE-2022-26207	9.8	2%	Mar 15	Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5050_b20200504
CVE-2022-26206	9.8	2%	Mar 15	Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5050_b20200504
CVE-2021-44620	9.8	1%	Mar 11	A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime parameters Affected: through 4.1.2cu.5050_b20200504
CVE-2022-25077	9.8	30%	Feb 24	TOTOLink A3100R V4.1.2cu.5050_B20200504 was discovered to contain a command injection vulnerability in the "Main" function Affected: 4.1.2cu.5050_b20200504
CVE-2021-44247	9.8	3%	Feb 4	Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection vulnerability in the… Affected: 4.1.2cu.5050_b20200504