A3300R vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

A3

Product

A3300R

by Totolink · last CVE Apr 23, 2026

65

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities65 In the news0 Timeline

Severity mix

Critical 32High 14Medium 19Low 0

Severity

All severities65 Critical32 High14 Medium19 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add A3300R to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-5178	8.8	4%	Mar 31	Totolink A3300R cstecgi.cgi setIptvCfg command injection Affected: 17.0.0cu.557_b20221024
CVE-2026-5177	8.8	3%	Mar 31	Totolink A3300R cstecgi.cgi setWiFiBasicCfg command injection Affected: 17.0.0cu.557_b20221024
CVE-2026-5105	8.8	4%	Mar 30	Totolink A3300R Parameter cstecgi.cgi setVpnPassCfg command injection Affected: 17.0.0cu.557_b20221024
CVE-2026-5104	8.8	3%	Mar 30	Totolink A3300R cstecgi.cgi setStaticRoute command injection Affected: 17.0.0cu.557_b20221024
CVE-2026-5103	8.8	4%	Mar 30	Totolink A3300R cstecgi.cgi setUPnPCfg command injection Affected: 17.0.0cu.557_b20221024
CVE-2026-5102	8.8	2%	Mar 30	Totolink A3300R Parameter cstecgi.cgi setSmartQosCfg command injection Affected: 17.0.0cu.557_b20221024
CVE-2026-5101	8.8	2%	Mar 29	Totolink A3300R Parameter cstecgi.cgi setLanCfg command injection Affected: 17.0.0cu.557_b20221024
CVE-2025-12260	8.8	1%	Oct 27	TOTOLINK A3300R POST Parameter cstecgi.cgi setSyslogCfg stack-based overflow Affected: 17.0.0cu.557_B20221024
CVE-2025-12259	8.8	1%	Oct 27	TOTOLINK A3300R POST Parameter cstecgi.cgi setScheduleCfg stack-based overflow Affected: 17.0.0cu.557_B20221024
CVE-2025-12258	8.8	1%	Oct 27	TOTOLINK A3300R POST Parameter cstecgi.cg setOpModeCfg stack-based overflow Affected: 17.0.0cu.557_B20221024
CVE-2025-12241	8.8	1%	Oct 27	TOTOLINK A3300R POST Parameter cstecgi.cgi setLanguageCfg stack-based overflow Affected: 17.0.0cu.557_b20221024
CVE-2024-7331	8.8	1%	Aug 1	TOTOLINK A3300R cstecgi.cgi UploadCustomModule buffer overflow Affected: 17.0.0cu.557_b20221024
CVE-2024-27521	8.0	1%	Mar 26	TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote command execution (RCE) vulnerability via multiple parameters in the "setOpModeCfg"… Affected: 17.0.0cu.557_b20221024
CVE-2023-46992	7.5	1%	Oct 31	TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control Affected: 17.0.0cu.557_b20221024