a3100r firmware vulnerabilities and fixes

Recent CVEs affecting a3100r firmware, with upgrade or downgrade steps. 21 tracked.

Also searched as: a3100rfirmware.

a3100r firmware has 21 tracked vulnerabilities, 10 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-05-10. Highest priority: CVE-2025-28036 (score 62/100).

• CVE-2025-4496 HIGH 8.8 MITIGATE MITIGATE A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210
• CVE-2025-45790 CRITICAL 9.8 MITIGATE TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interf
• CVE-2025-45789 CRITICAL 9.8 MITIGATE TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules.
• CVE-2025-45788 CRITICAL 9.8 MITIGATE TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules.
• CVE-2025-45787 CRITICAL 9.8 MITIGATE TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules.
• CVE-2025-28256 CRITICAL 9.8 MITIGATE An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the
• CVE-2025-28036 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability
• CVE-2025-28035 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability
• CVE-2025-28034 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28033 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28032 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28029 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310
• CVE-2025-28028 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310
• CVE-2025-28027 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310
• CVE-2025-28026 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310
• CVE-2025-28025 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310
• CVE-2024-7158 MEDIUM 6.3 MITIGATE A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504
• CVE-2024-7157 HIGH 8.8 MITIGATE A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504
• CVE-2024-42547 CRITICAL 9.8 MITIGATE TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the http_host parameter in the
• CVE-2024-42546 CRITICAL 9.8 MITIGATE TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the password parameter in the l
• CVE-2024-36650 HIGH 7.5 MITIGATE TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function

FAQ

How do I fix a3100r firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is a3100r firmware being exploited right now?

None of the tracked a3100r firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which a3100r firmware CVE should I patch first?

CVE-2025-28036 currently ranks highest (62/100): TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability.

RSS feed for a3100r firmware · ← Back to latest CVEs