A720R vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

A7

Product

A720R

by TOTOLINK · last CVE Aug 30, 2026

29

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities29 In the news0 Timeline

Severity mix

Critical 10High 11Medium 8Low 0

Severity

All severities29 Critical10 High11 Medium8 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add A720R to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-8869	8.1	2%	Sep 15	A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5 Affected: 4.1.5
CVE-2022-36610	7.8	0%	Aug 29	TOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample Affected: 4.1.5cu.532_b20210610
CVE-2022-36456	7.8	1%	Aug 25	TOTOLink A720R V4.1.5cu.532_B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi Affected: 4.1.5cu.532_b20210610
CVE-2025-4270	7.5	14%	May 5	A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 Affected: 4.1.5cu.374
CVE-2021-45739	7.5	1%	Feb 4	TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function Affected: 4.1.5cu.470_b20200911
CVE-2021-45737	7.5	1%	Feb 4	TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function Affected: 4.1.5cu.470_b20200911
CVE-2021-44246	7.5	1%	Feb 4	Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in the function… Affected: 4.1.5cu.470_b20200911
CVE-2021-35326	7.5	3%	Aug 5	A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows attackers to download the configuration file via sending a crafted HTTP request Affected: 4.1.5cu.470_b20200911
CVE-2021-35325	7.5	13%	Aug 5	A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to cause a denial of service (DOS) Affected: 4.1.5cu.470_b20200911
CVE-2022-38535	7.2	2%	Sep 15	TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg function Affected: 4.1.5cu.374
CVE-2022-38534	7.2	2%	Sep 15	TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setdiagnosicfg function Affected: 4.1.5cu.374