A3100r Firmware vulnerabilities | LiveThreat CVE Feed

Product

A3100r Firmware

by Totolink · last CVE May 10, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities47 In the news0 Timeline

Severity mix

Critical 25High 20Medium 2Low 0

Severity

All severities47 Critical25 High20 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add A3100r Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-7158	8.8	3%	Jul 28	TOTOLINK A3100R HTTP POST Request cstecgi.cgi setTelnetCfg command injection Affected: 4.1.2cu.5050_b20200504
CVE-2024-7157	8.8	7%	Jul 28	TOTOLINK A3100R getSaveConfig buffer overflow Affected: 4.1.2cu.5050_b20200504
CVE-2021-46008	8.8	1%	Mar 30	In totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official released firmware Affected: 5.9c.4577
CVE-2021-46010	8.8	1%	Mar 30	Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration Affected: 5.9c.4577
CVE-2022-29639	8.1	2%	May 18	TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a command injection vulnerability via the magicid parameter in the function… Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2024-36650	7.5	1%	Jun 11	TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file `/lib/cste_modules/system.so`, the length… Affected: 4.1.2cu.5247_b20211129
CVE-2022-29643	7.5	1%	May 18	TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2022-29642	7.5	1%	May 18	TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the url parameter in the function setUrlFilterRules Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2022-29641	7.5	1%	May 18	TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function… Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2022-29640	7.5	1%	May 18	TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setPortForwardRules Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2022-29638	7.5	1%	May 18	TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setIpQosRules Affected: 4.1.2cu.5050_b20200504; 4.1.2cu.5247_b20211129
CVE-2021-44246	7.5	1%	Feb 4	Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in the function… Affected: 4.1.2cu.5050_b20200504
CVE-2025-28028	7.3	0%	Apr 23	TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow… Affected: 4.1.2cu.5247_b20211129
CVE-2025-28025	7.3	0%	Apr 23	TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow… Affected: 4.1.2cu.5247_b20211129
CVE-2025-28027	7.3	0%	Apr 22	TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow… Affected: 4.1.2cu.5247_b20211129
CVE-2025-28032	7.3	0%	Apr 22	TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R… Affected: 4.1.2cu.5247_b20211129
CVE-2025-28033	7.3	0%	Apr 22	TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R… Affected: 4.1.2cu.5247_b20211129
CVE-2025-28026	7.3	0%	Apr 22	TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow… Affected: 4.1.2cu.5247_b20211129
CVE-2025-28029	7.3	0%	Apr 22	TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow… Affected: 4.1.2cu.5247_b20211129
CVE-2022-28935	7.2	3%	Jul 6	Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU… Affected: 4.1.2cu.5050_b20200504