A3
Product
A3300R
65
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 32High 14Medium 19Low 0
Watch
Add A3300R to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-31177 | 9.8 | Apr 23 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMinAlive parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024 |
| CVE-2026-31178 | 9.8 | Apr 23 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMaxAlive parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024 |
| CVE-2026-31181 | 9.8 | Apr 23 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunServerAddr parameter to… Affected: 17.0.0cu.557_b20221024 |
| CVE-2026-31175 | 9.8 | Apr 23 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunEnable parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024 |
| CVE-2026-31170 | 9.8 | Apr 9 | An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun-pass parameter to /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557_b20221024 |
| CVE-2026-5176 | 9.8 | Mar 31 | Totolink A3300R cstecgi.cgi setSyslogCfg command injection Affected: 17.0.0cu.557_b20221024 |
| CVE-2025-12240 | 9.8 | Oct 27 | TOTOLINK A3300R cstecgi.cgi setDmzCfg buffer overflow Affected: 17.0.0cu.557_b20221024 |
| CVE-2025-12239 | 9.8 | Oct 27 | TOTOLINK A3300R cstecgi.cgi setDdnsCfg buffer overflow Affected: 17.0.0cu.557_b20221024 |
| CVE-2025-52046 | 9.8 | Jul 17 | Totolink A3300R V17.0.0cu.596_B20250515 was found to contain a command injection vulnerability in the sub_4197C0 function via the mac and desc parameters Affected: 17.0.0cu.596_b20250515 |
| CVE-2024-24333 | 9.8 | Jan 30 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the desc parameter in the setWiFiAclRules function Affected: 17.0.0cu.557_b20221024 |
| CVE-2024-24332 | 9.8 | Jan 30 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilterRules function Affected: 17.0.0cu.557_b20221024 |
| CVE-2024-24331 | 9.8 | Jan 30 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setWiFiScheduleCfg function Affected: 17.0.0cu.557_b20221024 |
| CVE-2024-24330 | 9.8 | Jan 30 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the port or enable parameter in the setRemoteCfg function Affected: 17.0.0cu.557_b20221024 |
| CVE-2024-24329 | 9.8 | Jan 30 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPortForwardRules function Affected: 17.0.0cu.557_b20221024 |
| CVE-2024-24328 | 9.8 | Jan 30 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function Affected: 17.0.0cu.557_b20221024 |
| CVE-2024-24327 | 9.8 | Jan 30 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pppoePass parameter in the setIpv6Cfg function Affected: 17.0.0cu.557_b20221024 |
| CVE-2024-24326 | 9.8 | Jan 30 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function Affected: 17.0.0cu.557_b20221024 |
| CVE-2024-24325 | 9.8 | Jan 30 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setParentalRules function Affected: 17.0.0cu.557_b20221024 |
| CVE-2024-23061 | 9.8 | Jan 11 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setScheduleCfg function Affected: 17.0.0cu.557_b20221024 |
| CVE-2024-23060 | 9.8 | Jan 11 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDmzCfg function Affected: 17.0.0cu.557_b20221024 |
| CVE-2024-23059 | 9.8 | Jan 11 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the username parameter in the setDdnsCfg function Affected: 17.0.0cu.557_b20221024 |
| CVE-2024-23058 | 9.8 | Jan 11 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pass parameter in the setTr069Cfg function Affected: 17.0.0cu.557_b20221024 |
| CVE-2024-23057 | 9.8 | Jan 11 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the tz parameter in the setNtpCfg function Affected: 17.0.0cu.557_b20221024 |
| CVE-2024-22942 | 9.8 | Jan 11 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the hostName parameter in the setWanCfg function Affected: 17.0.0cu.557_b20221024 |
| CVE-2023-46993 | 9.8 | Oct 31 | In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command injection Affected: 17.0.0cu.557_b20221024 |
| CVE-2023-46976 | 9.8 | Oct 31 | TOTOLINK A3300R 17.0.0cu.557_B20221024 contains a command injection via the file_name parameter in the UploadFirmwareFile function Affected: 17.0.0cu.557_b20221024 |
| CVE-2023-37173 | 9.8 | Jul 7 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function Affected: 17.0.0cu.557_b20221024 |
| CVE-2023-37172 | 9.8 | Jul 7 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function Affected: 17.0.0cu.557_b20221024 |
| CVE-2023-37171 | 9.8 | Jul 7 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function Affected: 17.0.0cu.557_b20221024 |
| CVE-2023-37170 | 9.8 | Jul 7 | TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg… Affected: 17.0.0cu.557_b20221024 |
| CVE-2023-31729 | 9.8 | May 18 | TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi Affected: 17.0.0cu.557 |
| CVE-2025-55895 | 9.1 | Dec 15 | TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control Affected: 17.0.0cu.557_b20221024 |
Showing 32