Vulnerabilities (CVE)

Filtered by vendor Totolink Subscribe
Filtered by product A7000r Firmware
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-37078 1 Totolink 2 A7000r, A7000r Firmware 2023-08-08 N/A 7.8 HIGH
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg.
CVE-2022-37083 1 Totolink 2 A7000r, A7000r Firmware 2023-08-08 N/A 7.8 HIGH
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setDiagnosisCfg.
CVE-2022-37082 1 Totolink 2 A7000r, A7000r Firmware 2023-08-08 N/A 7.8 HIGH
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the host_time parameter at the function NTPSyncWithHost.
CVE-2022-37081 1 Totolink 2 A7000r, A7000r Firmware 2023-08-08 N/A 7.8 HIGH
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg.
CVE-2022-37079 1 Totolink 2 A7000r, A7000r Firmware 2023-08-08 N/A 7.8 HIGH
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.
CVE-2022-37076 1 Totolink 2 A7000r, A7000r Firmware 2023-08-08 N/A 7.8 HIGH
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.