A8
Product
A800R
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 14High 17Medium 2Low 0
Watch
Add A800R to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-4496 | 9.8 | May 10 | A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927 Affected: 4.1.8cu.5241_b20210927 |
| CVE-2025-28036 | 9.8 | Apr 22 | TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter Affected: 4.1.2cu.5137_b20200730 |
| CVE-2025-28035 | 9.8 | Apr 22 | TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter Affected: 4.1.2cu.5137_b20200730 |
| CVE-2025-28034 | 9.8 | Apr 22 | TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R… Affected: 4.1.2cu.5137_b20200730 |
| CVE-2025-28138 | 9.8 | Mar 27 | The TOTOLINK A800R V4.1.2cu.5137_B20200730 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter Affected: 4.1.2cu.5137_b20200730 |
| CVE-2022-26214 | 9.8 | Mar 15 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5137_b20200730 |
| CVE-2022-26212 | 9.8 | Mar 15 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5137_b20200730 |
| CVE-2022-26211 | 9.8 | Mar 15 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5137_b20200730 |
| CVE-2022-26210 | 9.8 | Mar 15 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5137_b20200730 |
| CVE-2022-26209 | 9.8 | Mar 15 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5137_b20200730 |
| CVE-2022-26208 | 9.8 | Mar 15 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5137_b20200730 |
| CVE-2022-26207 | 9.8 | Mar 15 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5137_b20200730 |
| CVE-2022-26206 | 9.8 | Mar 15 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R… Affected: 4.1.2cu.5137_b20200730 |
| CVE-2022-25076 | 9.8 | Feb 24 | TOTOLink A800R V4.1.2cu.5137_B20200730 was discovered to contain a command injection vulnerability in the "Main" function Affected: v4.1.2cu.5137_b20200730 |
| CVE-2026-19847 | 8.8 | Aug 14 | TOTOLINK A800R wps.so cstecgi.cgi setWiFiWpsConfig stack-based overflow Affected: 4.1.2cu.5137_B20200730 |
| CVE-2026-19846 | 8.8 | Aug 14 | TOTOLINK A800R firewall.so cstecgi.cgi setUrlFilterRules stack-based overflow Affected: 4.1.2cu.5137_B20200730 |
| CVE-2026-19845 | 8.8 | Aug 14 | TOTOLINK A800R lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow Affected: 4.1.2cu.5137_B20200730 |
| CVE-2026-19844 | 8.8 | Aug 14 | TOTOLINK A800R ipv6.so cstecgi.cgi setRadvdCfg stack-based overflow Affected: 4.1.2cu.5137_B20200730 |
| CVE-2026-19815 | 8.8 | Aug 14 | TOTOLINK A800R firewall.so cstecgi.cgi setParentalRules stack-based overflow Affected: 4.1.2cu.5137_B20200730 |
| CVE-2026-19814 | 8.8 | Aug 14 | TOTOLINK A800R firewall.so cstecgi.cgi setMacQos stack-based overflow Affected: 4.1.2cu.5137_B20200730 |
| CVE-2026-19813 | 8.8 | Aug 14 | TOTOLINK A800R firewall.so cstecgi.cgi setMacFilterRules stack-based overflow Affected: 4.1.2cu.5137_B20200730 |
| CVE-2026-19812 | 8.8 | Aug 14 | TOTOLINK A800R product.so cstecgi.cgi UploadCustomModule stack-based overflow Affected: 4.1.2cu.5137_B20200730 |
| CVE-2026-19811 | 8.8 | Aug 14 | TOTOLINK A800R firewall.so cstecgi.cgi setIpQosRules stack-based overflow Affected: 4.1.2cu.5137_B20200730 |
| CVE-2026-6157 | 8.8 | Apr 13 | Totolink A800R app.so setAppEasyWizardConfig buffer overflow Affected: 4.1.2cu.5137_B20200730 |
| CVE-2022-36611 | 7.8 | Aug 29 | TOTOLINK A800R V4.1.2cu.5137_B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample Affected: 4.1.2cu.5137_b20200730 |
| CVE-2025-28020 | 7.3 | Apr 23 | TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter Affected: 4.1.2cu.5137_b20200730 |
| CVE-2025-28019 | 7.3 | Apr 23 | TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component Affected: 4.1.2cu.5137_b20200730 |
| CVE-2025-28018 | 7.3 | Apr 23 | TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter Affected: 4.1.2cu.5137_b20200730 |
| CVE-2025-28033 | 7.3 | Apr 22 | TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R… Affected: 4.1.2cu.5137_b20200730 |
| CVE-2025-28032 | 7.3 | Apr 22 | TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R… Affected: 4.1.2cu.5137_b20200730 |
| CVE-2022-28935 | 7.2 | Jul 6 | Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU… Affected: 4.1.2cu.5137_b20200730 |
| CVE-2025-28017 | 6.5 | Apr 23 | TOTOLINK A800R V4.1.2cu.5032_B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERY_STRING parameter Affected: 4.1.2cu.5032_b20200408 |
| CVE-2025-28136 | 6.5 | Apr 15 | TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi Affected: 4.1.2cu.5137_b20200730 |
Showing 33
