A3300R vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

A3

Product

A3300R

by Totolink · last CVE Apr 23, 2026

65

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities65 In the news0 Timeline

Severity mix

Critical 32High 14Medium 19Low 0

Severity

All severities65 Critical32 High14 Medium19 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add A3300R to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-31159	6.5	0%	Apr 23	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the password parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024
CVE-2026-31160	6.5	0%	Apr 23	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the provider parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024
CVE-2026-31164	6.5	0%	Apr 23	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeMtu parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024
CVE-2026-31165	6.5	0%	Apr 23	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeServiceName parameter to… Affected: 17.0.0cu.557_b20221024
CVE-2026-31171	6.5	0%	Apr 23	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the url parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024
CVE-2026-31167	6.5	0%	Apr 23	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the mode parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024
CVE-2026-31168	6.5	0%	Apr 23	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the recHour parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024
CVE-2026-31169	6.5	0%	Apr 23	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the week parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024
CVE-2026-31179	6.5	0%	Apr 23	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunPort parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024
CVE-2026-31162	6.5	0%	Apr 23	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the ttlWay parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024
CVE-2026-31163	6.5	0%	Apr 23	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the dhcpMtu parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024
CVE-2026-31166	6.5	0%	Apr 23	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the hour parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024
CVE-2025-55901	6.5	1%	Dec 15	TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter Affected: 17.0.0cu.596_b20250515
CVE-2026-5679	5.5	2%	Apr 6	Totolink A3300R cstecgi.cgi vsetTr069Cfg os command injection Affected: 17.0.0cu.557_B20221024
CVE-2024-7155	4.7	0%	Jul 28	A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024 and classified as problematic Affected: 17.0.0cu.557_b20221024