Login Request a demo
AF
Product
A6000r Firmware
by Totolink · last CVE Apr 4, 2025
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 4High 4Medium 5Low 0
Severity
All severities13Critical4High4Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add A6000r Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-3249
9.8
3%
Apr 4
A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000
Affected: 1.0.1-b20201211.2000
CVE-2024-41319
9.8
5%
Jul 23
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the cmd parameter in the webcmd function
Affected: 1.0.1-b20201211.2000
CVE-2024-41318
9.8
2%
Jul 22
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function
Affected: 1.0.1-b20201211.2000
CVE-2024-41316
9.8
2%
Jul 22
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function
Affected: 1.0.1-b20201211.2000
CVE-2024-41320
8.8
2%
Jul 22
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the get_apcli_conn_info function
Affected: 1.0.1-b20201211.2000
CVE-2024-37626
8.8
1%
Jun 20
A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vif_enable function
Affected: 1.0.1-b20201211.2000
CVE-2024-57211
8.0
1%
Jan 10
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function
Affected: 1.0.1-b20201211.2000
CVE-2024-41317
8.0
2%
Jul 22
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function
Affected: 1.0.1-b20201211.2000
CVE-2024-41315
6.8
2%
Jul 22
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function
Affected: 1.0.1-b20201211.2000
CVE-2024-41314
6.8
2%
Jul 22
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function
Affected: 1.0.1-b20201211.2000
CVE-2024-57213
6.3
1%
Jan 10
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the action_passwd function
Affected: 1.0.1-b20201211.2000
CVE-2024-57214
6.3
1%
Jan 10
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function
Affected: 1.0.1-b20201211.2000
CVE-2024-57212
5.1
1%
Jan 10
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the action_reboot function
Affected: 1.0.1-b20201211.2000
Showing 13