[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8h5Jw6NnnK70mPpAo3t586KtaLo8PYBGFXTC7SPPDTk":3,"g5a-ex:totolink\u002Fa950rg@*":85,"g5a-family:totolink\u002Fa950rg":87},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":62,"seoMetadata":63,"meta":82},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"totolink","a950rg",0,26,"2025-07-21",[],"A950rg by Totolink is a technology product and 26 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,30,35,42,46,49,52,55,59],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2025-45797","TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of \u002Flib\u002Fcste_modules\u002Fsystem.so.","2025-05-08",9.8,"v3.1","Critical",false,0.18331,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":29},"CVE-2022-25082","TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a command injection vulnerability in the \"Main\" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.","2022-02-24",0.13699,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":34},"CVE-2022-26210","Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setUpgradeFW, via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.","2022-03-15",0.05693,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":21,"severity":40,"isKev":23,"epssScore":41},"CVE-2022-28935","Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU V5.9c.5185_B20201128, Totolink A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability.","2022-07-06",7.2,"High",0.03299,{"cveId":43,"description":44,"publishedDate":33,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":45},"CVE-2022-26211","Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function CloudACMunualUpdate, via the deviceMac and deviceName parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.",0.02779,{"cveId":47,"description":48,"publishedDate":33,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":45},"CVE-2022-26208","Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setWebWlanIdx, via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.",{"cveId":50,"description":51,"publishedDate":33,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":45},"CVE-2022-26214","Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the host_time parameter.",{"cveId":53,"description":54,"publishedDate":33,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":45},"CVE-2022-26212","Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setDeviceName, via the deviceMac and deviceName parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.",{"cveId":56,"description":57,"publishedDate":33,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":58},"CVE-2022-26207","Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setDiagnosisCfg, via the ipDoamin parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.",0.02218,{"cveId":60,"description":61,"publishedDate":33,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":58},"CVE-2022-26209","Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setUploadSetting, via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.",[],{"title":64,"metaDescription":65,"keywords":66,"structuredData":67},"A950rg by Totolink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for A950rg by Totolink with 26 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","A950rg vulnerabilities, A950rg security, A950rg CVE, Totolink A950rg, A950rg threat intelligence, Totolink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":68,"@type":69,"name":70,"description":65,"url":71,"manufacturer":72,"applicationCategory":76,"softwareVersion":77,"mainEntity":78},"https:\u002F\u002Fschema.org","SoftwareApplication","A950rg","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftotolink\u002Fa950rg",{"@type":73,"name":74,"url":75},"Organization","Totolink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftotolink","Security Software","Multiple versions",{"@type":79,"name":80,"description":81,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","A950rg Security Vulnerabilities","Security vulnerabilities affecting A950rg by Totolink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":83,"apiVersion":84},"2026-10-18T17:30:09.381Z","3.0",{"rows":86,"total":9,"capped":23,"failed":9},[],[88],{"product":89,"cves":90},"a950rg_firmware",25]