Login Request a demo
A3
Product
A3300R
by Totolink · last CVE Apr 23, 2026
65
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities65In the news0Timeline
Severity mix
Critical 32High 14Medium 19Low 0
Severity
All severities65Critical32High14Medium19Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add A3300R to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-31172
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the user parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2026-31174
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the informEnable parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2026-31176
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun_user parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2026-31173
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the interval parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2026-31159
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the password parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2026-31160
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the provider parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2026-31164
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeMtu parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2026-31165
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeServiceName parameter to…
Affected: 17.0.0cu.557_b20221024
CVE-2026-31171
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the url parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2026-31167
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the mode parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2026-31168
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the recHour parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2026-31169
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the week parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2026-31179
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunPort parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2026-31162
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the ttlWay parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2026-31163
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the dhcpMtu parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2026-31166
6.5
0%
Apr 23
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the hour parameter to /cgi-bin/cstecgi.cgi
Affected: 17.0.0cu.557_b20221024
CVE-2025-55901
6.5
1%
Dec 15
TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter
Affected: 17.0.0cu.596_b20250515
CVE-2026-5679
5.5
2%
Apr 6
Totolink A3300R cstecgi.cgi vsetTr069Cfg os command injection
Affected: 17.0.0cu.557_B20221024
CVE-2024-7155
4.7
0%
Jul 28
TOTOLINK A3300R shadow.sample hard-coded password
Affected: 17.0.0cu.557_b20221024
Showing 19