A7
Product
A720R
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 11Medium 8Low 0
Watch
Add A720R to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-9303 | 9.8 | Aug 21 | A security flaw has been discovered in TOTOLINK A720R 4.1.5cu.630_B20250509 Affected: 4.1.5cu.630_b20250509 |
| CVE-2023-23064 | 9.8 | Feb 17 | TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control Affected: 4.1.5cu.532_b20210610 |
| CVE-2021-45742 | 9.8 | Feb 4 | TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function Affected: 4.1.5cu.470_b20200911 |
| CVE-2021-45740 | 9.8 | Feb 4 | TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function Affected: 4.1.5cu.470_b20200911 |
| CVE-2021-44247 | 9.8 | Feb 4 | Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection vulnerability in the… Affected: 4.1.5cu.470_b20200911 |
| CVE-2021-35327 | 9.8 | Aug 5 | A vulnerability in TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to start the Telnet service, then login with the default credentials via a crafted POST… Affected: 4.1.5cu.470_b20200911 |
| CVE-2021-35324 | 9.8 | Aug 5 | A vulnerability in the Form_Login function of TOTOLINK A720R A720R_Firmware V4.1.5cu.470_B20200911 allows attackers to bypass authentication Affected: 4.1.5cu.470_b20200911 |
| CVE-2021-27710 | 9.8 | Apr 14 | Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute… Affected: 4.1.5cu.470_b20200911 |
| CVE-2021-27708 | 9.8 | Apr 14 | Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute… Affected: 4.1.5cu.470_b20200911 |
| CVE-2026-82539 | 9.1 | Aug 30 | TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption Affected: 4.1.5cu.630_B20250509 |
| CVE-2024-8869 | 8.1 | Sep 15 | A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5 Affected: 4.1.5 |
| CVE-2022-36610 | 7.8 | Aug 29 | TOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample Affected: 4.1.5cu.532_b20210610 |
| CVE-2022-36456 | 7.8 | Aug 25 | TOTOLink A720R V4.1.5cu.532_B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi Affected: 4.1.5cu.532_b20210610 |
| CVE-2025-4270 | 7.5 | May 5 | A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 Affected: 4.1.5cu.374 |
| CVE-2021-45739 | 7.5 | Feb 4 | TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function Affected: 4.1.5cu.470_b20200911 |
| CVE-2021-45737 | 7.5 | Feb 4 | TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function Affected: 4.1.5cu.470_b20200911 |
| CVE-2021-44246 | 7.5 | Feb 4 | Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in the function… Affected: 4.1.5cu.470_b20200911 |
| CVE-2021-35326 | 7.5 | Aug 5 | A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows attackers to download the configuration file via sending a crafted HTTP request Affected: 4.1.5cu.470_b20200911 |
| CVE-2021-35325 | 7.5 | Aug 5 | A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to cause a denial of service (DOS) Affected: 4.1.5cu.470_b20200911 |
| CVE-2022-38535 | 7.2 | Sep 15 | TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg function Affected: 4.1.5cu.374 |
| CVE-2022-38534 | 7.2 | Sep 15 | TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setdiagnosicfg function Affected: 4.1.5cu.374 |
| CVE-2025-60683 | 6.5 | Nov 13 | A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary, specifically in the sub_40BFA4 function that… Affected: 4.1.5cu.614_b20230630 |
| CVE-2025-60682 | 6.5 | Nov 13 | A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the cloudupdate_check binary, specifically in the sub_402414 function… Affected: 4.1.5cu.614_b20230630 |
| CVE-2021-43662 | 6.5 | Mar 31 | totolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue which causes uncontrolled resource consumption Affected: 4.1.5cu.470_b20200911 |
| CVE-2025-4271 | 5.3 | May 5 | A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 Affected: 4.1.5cu.374 |
| CVE-2025-4269 | 5.3 | May 5 | A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical Affected: 4.1.5cu.374 |
| CVE-2025-4268 | 5.3 | May 5 | A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical Affected: 4.1.5cu.374 |
| CVE-2025-60685 | 5.1 | Nov 13 | A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary (sub_401EE0 function) Affected: 4.1.5cu.614_b20230630 |
| CVE-2025-60686 | 5.1 | Nov 13 | A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers (A720R V4.1.5cu.614_B20230630, LR1200GB… Affected: 4.1.5cu.614_b20230630 |
Showing 29
