Login Request a demo
AF
Product
A860r Firmware
by Totolink · last CVE Sep 29, 2022
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 6High 2Medium 0Low 0
Severity
All severities8Critical6High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add A860r Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-40475
9.8
4%
Sep 29
TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi
Affected: 4.1.2cu.5182_b20201027
CVE-2022-37843
9.8
2%
Sep 6
In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without filtering, resulting in a command…
Affected: 4.1.2cu.5182_b20201027
CVE-2022-37842
9.8
1%
Sep 6
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability
Affected: 4.1.2cu.5182_b20201027
CVE-2022-37840
9.8
1%
Sep 6
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability
Affected: 4.1.2cu.5182_b20201027
CVE-2022-37839
9.8
1%
Sep 6
TOTOLINK A860R V4.1.2cu.5182_B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi
Affected: 4.1.2cu.5182_b20201027
CVE-2022-25083
9.8
3%
Feb 24
TOTOLink A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection vulnerability in the "Main" function
Affected: 4.1.2cu.5182_b20201027
CVE-2022-36614
7.8
0%
Aug 29
TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a hardcoded password for root at /etc/shadow.sample
Affected: 4.1.2cu.5182_b20201027
CVE-2022-37841
7.5
1%
Sep 6
In TOTOLINK A860R V4.1.2cu.5182_B20201027 there is a hard coded password for root in /etc/shadow.sample
Affected: 4.1.2cu.5182_b20201027
Showing 8