Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Totolink A3700R FirmwareCode Injection

Risk 69
Severity
7.8
Code Injection
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

An issue in TOTOlink A3700R v.9.1.2u.6134B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function.

First published (updated )
CVE-2023-48192

TOTOLINK A3700r FirmwareTOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Contr…

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

TOTOLINK A3700R V9.1.2u.6134B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control.

First published (updated )
CVE-2023-43141

Totolink A3700R FirmwareTOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the ip paramet…

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg.

First published (updated )
CVE-2022-36466

Totolink A3700R FirmwareTOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser …

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the pppoeUser parameter.

First published (updated )
CVE-2022-36465

Totolink A3700R FirmwareTOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort para…

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.

First published (updated )
CVE-2022-36464

Totolink A3700R FirmwareTOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command pa…

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.

First published (updated )
CVE-2022-36463

Totolink A3700R FirmwareTOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang param…

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.

First published (updated )
CVE-2022-36462

Totolink A3700R FirmwareOS Command Injection, Command Injection

Risk 69
Severity
7.8
OS Command Injection, Command Injection
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.

First published (updated )
CVE-2022-36461

Totolink A3700R FirmwareOS Command Injection, Command Injection

Risk 69
Severity
7.8
OS Command Injection, Command Injection
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost.

First published (updated )
CVE-2022-36459

Totolink A3700R FirmwareOS Command Injection, Command Injection

Risk 69
Severity
7.8
OS Command Injection, Command Injection
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.

First published (updated )
CVE-2022-36460

Totolink A3700R FirmwareOS Command Injection, Command Injection

Risk 69
Severity
7.8
OS Command Injection, Command Injection
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg.

First published (updated )
CVE-2022-36458

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203