A7
Product
A7000R
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 22Medium 2Low 0
Watch
Add A7000R to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-6168 | 8.8 | Apr 13 | TOTOLINK A7000R cstecgi.cgi setWiFiEasyGuestCfg stack-based overflow Affected: 9.1.0u.6115 |
| CVE-2026-1548 | 8.8 | Jan 28 | Totolink A7000R cstecgi.cgi CloudACMunualUpdateUserdata command injection Affected: 4.1cu.4154 |
| CVE-2024-7213 | 8.8 | Jul 30 | A vulnerability, which was classified as critical, was found in TOTOLINK A7000R 9.1.0u.6268_B20220504 Affected: 9.1.0u.6268_b20220504 |
| CVE-2024-7212 | 8.8 | Jul 30 | A vulnerability, which was classified as critical, has been found in TOTOLINK A7000R 9.1.0u.6268_B20220504 Affected: 9.1.0u.6268_b20220504 |
| CVE-2022-37084 | 7.8 | Aug 25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the sPort parameter at the addEffect function Affected: 9.1.0u.6115_b20201022 |
| CVE-2022-37083 | 7.8 | Aug 25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setDiagnosisCfg Affected: 9.1.0u.6115_b20201022 |
| CVE-2022-37082 | 7.8 | Aug 25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the host_time parameter at the function NTPSyncWithHost Affected: 9.1.0u.6115_b20201022 |
| CVE-2022-37081 | 7.8 | Aug 25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg Affected: 9.1.0u.6115_b20201022 |
| CVE-2022-37080 | 7.8 | Aug 25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg Affected: 9.1.0u.6115_b20201022 |
| CVE-2022-37079 | 7.8 | Aug 25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg Affected: 9.1.0u.6115_b20201022 |
| CVE-2022-37078 | 7.8 | Aug 25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg Affected: 9.1.0u.6115_b20201022 |
| CVE-2022-37077 | 7.8 | Aug 25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the pppoeUser parameter Affected: 9.1.0u.6115_b20201022 |
| CVE-2022-37076 | 7.8 | Aug 25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile Affected: 9.1.0u.6115_b20201022 |
| CVE-2022-37075 | 7.8 | Aug 25 | TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg Affected: 9.1.0u.6115_b20201022 |
| CVE-2025-63154 | 7.5 | Nov 10 | TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the addEffect parameter of the urldecode function Affected: 9.1.0u.6115_b20201022 |
| CVE-2025-63153 | 7.5 | Nov 10 | TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function Affected: 9.1.0u.6115_b20201022 |
| CVE-2025-63461 | 7.5 | Oct 31 | Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function Affected: 9.1.0u.6115_b20201022 |
| CVE-2025-63460 | 7.5 | Oct 31 | Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_4222E0 function Affected: 9.1.0u.6115_b20201022 |
| CVE-2025-63462 | 7.5 | Oct 31 | Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function Affected: 9.1.0u.6115_b20201022 |
| CVE-2025-63459 | 7.5 | Oct 31 | Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_421CF0 function Affected: 9.1.0u.6115_b20201022 |
| CVE-2024-28640 | 7.5 | Mar 16 | Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service (D0S) via the… Affected: 9.1.0u.6115_b20201022 |
| CVE-2023-45985 | 7.5 | Oct 16 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules Affected: 9.1.0u.6115_b20201022 |
Showing 22