Login Request a demo
A3
Product
A3300R
by TOTOLINK · last CVE Oct 27, 2025
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 3High 2Medium 1Low 0
Severity
All severities6Critical3High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add A3300R to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-12240
9.8
1%
Oct 27
TOTOLINK A3300R cstecgi.cgi setDmzCfg buffer overflow
Affected: 17.0.0cu.557_B20221024
CVE-2025-12239
9.8
1%
Oct 27
TOTOLINK A3300R cstecgi.cgi setDdnsCfg buffer overflow
Affected: 17.0.0cu.557_B20221024
CVE-2024-24329
9.8
6%
Jan 30
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPortForwardRules function
Affected: V17.0.0cu.557_B20221024
CVE-2025-12241
8.8
1%
Oct 27
TOTOLINK A3300R POST Parameter cstecgi.cgi setLanguageCfg stack-based overflow
Affected: 17.0.0cu.557_B20221024
CVE-2024-7331
8.8
1%
Aug 1
TOTOLINK A3300R cstecgi.cgi UploadCustomModule buffer overflow
Affected: 17.0.0cu.557_B20221024
CVE-2024-7155
4.7
0%
Jul 28
TOTOLINK A3300R shadow.sample hard-coded password
Affected: 17.0.0cu.557_B20221024
Showing 6