a3000ru firmware vulnerabilities and fixes

Recent CVEs affecting a3000ru firmware, with upgrade or downgrade steps. 14 tracked.

Also searched as: a3000rufirmware.

a3000ru firmware has 14 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-05-10. Highest priority: CVE-2025-28036 (score 62/100).

• CVE-2025-4496 HIGH 8.8 MITIGATE MITIGATE A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210
• CVE-2025-2955 MEDIUM 5.3 UPGRADE A vulnerability has been found in TOTOLINK A3000RU up to 5.9c.5185 and classified as problematic
• CVE-2025-2688 MEDIUM 4.3 UPGRADE A vulnerability classified as problematic was found in TOTOLINK A3000RU up to 5.9c.5185
• CVE-2025-28036 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability
• CVE-2025-28035 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability
• CVE-2025-28034 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28033 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28032 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28029 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310
• CVE-2025-28028 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310
• CVE-2025-28027 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310
• CVE-2025-28026 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310
• CVE-2025-28025 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310
• CVE-2024-7170 LOW 3.5 MITIGATE A vulnerability was found in TOTOLINK A3000RU 5.9c.5185

FAQ

How do I fix a3000ru firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is a3000ru firmware being exploited right now?

None of the tracked a3000ru firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which a3000ru firmware CVE should I patch first?

CVE-2025-28036 currently ranks highest (62/100): TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability.

RSS feed for a3000ru firmware · ← Back to latest CVEs