Note:
This project will be discontinued after December 13, 2021. [more]
Product:
A3700r_firmware
(Totolink)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 28 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2022-08-25 | CVE-2022-36458 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg. | A3700r_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36459 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost. | A3700r_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36460 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile. | A3700r_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36461 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg. | A3700r_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36462 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg. | A3700r_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36463 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg. | A3700r_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36464 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules. | A3700r_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36465 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter. | A3700r_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36466 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg. | A3700r_firmware | 7.8 | ||
| 2023-09-25 | CVE-2023-43141 | TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control. | A3700r_firmware, N600r_firmware | 9.8 |