A6000r Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

AF

Product

A6000r Firmware

by Totolink · last CVE Apr 4, 2025

13

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 4High 4Medium 5Low 0

Severity

All severities13 Critical4 High4 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add A6000r Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-41320	8.8	2%	Jul 22	TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the get_apcli_conn_info function Affected: 1.0.1-b20201211.2000
CVE-2024-37626	8.8	1%	Jun 20	A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vif_enable function Affected: 1.0.1-b20201211.2000
CVE-2024-57211	8.0	1%	Jan 10	TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function Affected: 1.0.1-b20201211.2000
CVE-2024-41317	8.0	2%	Jul 22	TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function Affected: 1.0.1-b20201211.2000