[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fs-Ia9mH8RA9UdHJMVUMMtBktho3xvIPNsuCVgQt_HvA":3,"g5a-ex:totolink\u002Fa3100r_firmware@*":113,"g5a-family:totolink\u002Fa3100r_firmware":115},{"success":4,"data":5},true,{"product":6,"versions":29,"topVulnerabilitiesByEpss":35,"kevVulnerabilities":90,"seoMetadata":91,"meta":110},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":28},"totolink","a3100r_firmware",5,46,0,"2025-05-08",[14,18,21,23,26],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"4.1.2cu.5050_b20200504",25,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"4.1.2cu.5247_b20211129",21,{"version":22,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.8cu.5241_b20210927",{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"5.9c.1527",4,{"version":27,"cve_count":25,"kev_count":11,"has_kev":17},"5.9c.4577","A3100r Firmware by Totolink is a technology product with 5 tracked versions and 46 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[30,31,32,33,34],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":11,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":25,"kev_count":11,"has_kev":17},[36,44,49,57,62,68,74,79,83,87],{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":43},"CVE-2022-25077","TOTOLink A3100R V4.1.2cu.5050_B20200504 was discovered to contain a command injection vulnerability in the \"Main\" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.","2022-02-24",9.8,"v3.1","Critical",0.30404,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":48},"CVE-2021-46009","In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without cookies.","2022-03-30",0.12531,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":54,"severity":55,"isKev":17,"epssScore":56},"CVE-2024-7157","A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504. It has been classified as critical. This affects the function getSaveConfig of the file \u002Fcgi-bin\u002Fcstecgi.cgi?action=save&setting. The manipulation of the argument http_host leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272571. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","2024-07-28",8.7,"v4.0","High",0.07368,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":61},"CVE-2022-26210","Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setUpgradeFW, via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.","2022-03-15",0.05693,{"cveId":63,"description":64,"publishedDate":47,"cvssScore":65,"cvssVersion":41,"severity":66,"isKev":17,"epssScore":67},"CVE-2021-46006","In Totolink A3100R V5.9c.4577, \"test.asp\" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authentication.",6.5,"Medium",0.05503,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":41,"severity":55,"isKev":17,"epssScore":73},"CVE-2022-28935","Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU V5.9c.5185_B20201128, Totolink A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability.","2022-07-06",7.2,0.03299,{"cveId":75,"description":76,"publishedDate":52,"cvssScore":77,"cvssVersion":54,"severity":66,"isKev":17,"epssScore":78},"CVE-2024-7158","A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504. It has been declared as critical. This vulnerability affects the function setTelnetCfg of the file \u002Fcgi-bin\u002Fcstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument telnet_enabled leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272572. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.",5.3,0.03086,{"cveId":80,"description":81,"publishedDate":60,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":82},"CVE-2022-26214","Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the host_time parameter.",0.02779,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":82},"CVE-2021-44247","Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection vulnerability in the function setNoticeCfg. This vulnerability allows attackers to execute arbitrary commands via the IpFrom parameter.","2022-02-04",{"cveId":88,"description":89,"publishedDate":60,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":82},"CVE-2022-26211","Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function CloudACMunualUpdate, via the deviceMac and deviceName parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.",[],{"title":92,"metaDescription":93,"keywords":94,"structuredData":95},"A3100r Firmware by Totolink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for A3100r Firmware by Totolink covering 5 versions with 46 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","A3100r Firmware vulnerabilities, A3100r Firmware security, A3100r Firmware CVE, Totolink A3100r Firmware, A3100r Firmware threat intelligence, Totolink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":96,"@type":97,"name":98,"description":93,"url":99,"manufacturer":100,"applicationCategory":104,"softwareVersion":105,"mainEntity":106},"https:\u002F\u002Fschema.org","SoftwareApplication","A3100r Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftotolink\u002Fa3100r_firmware",{"@type":101,"name":102,"url":103},"Organization","Totolink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftotolink","Security Software","5 versions tracked",{"@type":107,"name":108,"description":109,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","A3100r Firmware Security Vulnerabilities","Security vulnerabilities affecting A3100r Firmware by Totolink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":111,"apiVersion":112},"2026-10-17T03:59:00.687Z","3.0",{"rows":114,"total":11,"capped":17,"failed":11},[],[]]