https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1143.htmlhttps://patchthecve.com/cve/CVE-2026-1143.htmlWed, 17 Jun 2026 10:15:12 +0000HIGH 8.8: A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513. This affects the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be launched remotely. The exploit has been made availablehttps://patchthecve.com/cve/CVE-2025-3675.htmlhttps://patchthecve.com/cve/CVE-2025-3675.htmlWed, 17 Jun 2026 09:20:27 +0000MEDIUM 5.3: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been rated as critical. Affected by this issue is the function setL2tpServerCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2025-3674.htmlhttps://patchthecve.com/cve/CVE-2025-3674.htmlWed, 17 Jun 2026 09:20:27 +0000MEDIUM 5.3: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been declared as critical. Affected by this vulnerability is the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack can be launched remotely. The exploihttps://patchthecve.com/cve/CVE-2025-3668.htmlhttps://patchthecve.com/cve/CVE-2025-3668.htmlWed, 17 Jun 2026 09:20:26 +0000MEDIUM 5.3: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been declared as critical. This vulnerability affects the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2025-3667.htmlhttps://patchthecve.com/cve/CVE-2025-3667.htmlWed, 17 Jun 2026 09:20:26 +0000MEDIUM 5.3: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been classified as critical. This affects the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been dischttps://patchthecve.com/cve/CVE-2025-3666.htmlhttps://patchthecve.com/cve/CVE-2025-3666.htmlWed, 17 Jun 2026 09:20:26 +0000MEDIUM 5.3: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical. Affected by this issue is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed thttps://patchthecve.com/cve/CVE-2025-3665.htmlhttps://patchthecve.com/cve/CVE-2025-3665.htmlWed, 17 Jun 2026 09:20:24 +0000MEDIUM 5.3: A vulnerability has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical. Affected by this vulnerability is the function setSmartQosCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit hashttps://patchthecve.com/cve/CVE-2025-3664.htmlhttps://patchthecve.com/cve/CVE-2025-3664.htmlWed, 17 Jun 2026 09:20:24 +0000MEDIUM 5.3: A vulnerability, which was classified as critical, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has beenhttps://patchthecve.com/cve/CVE-2025-3663.htmlhttps://patchthecve.com/cve/CVE-2025-3663.htmlWed, 17 Jun 2026 09:20:24 +0000MEDIUM 5.3: A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. This issue affects the function setWiFiEasyCfg/setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi of the component Password Handler. The manipulation leads to improper access controls. The ahttps://patchthecve.com/cve/CVE-2024-42545.htmlhttps://patchthecve.com/cve/CVE-2024-42545.htmlWed, 17 Jun 2026 07:49:36 +0000CRITICAL 9.8: TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the ssid parameter in setWizardCfg function.https://patchthecve.com/cve/CVE-2024-42543.htmlhttps://patchthecve.com/cve/CVE-2024-42543.htmlWed, 17 Jun 2026 07:49:36 +0000CRITICAL 9.8: TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the http_host parameter in the loginauth function.https://patchthecve.com/cve/CVE-2024-7160.htmlhttps://patchthecve.com/cve/CVE-2024-7160.htmlWed, 17 Jun 2026 08:19:28 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is the function setWanCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to command injection. It is possible to launch the attack remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2024-7156.htmlhttps://patchthecve.com/cve/CVE-2024-7156.htmlWed, 17 Jun 2026 08:19:27 +0000MEDIUM 5.3: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/ExportSettings.sh of the component apmib Configuration Handler. The manipulation leads to information disclosure. The attack mayhttps://patchthecve.com/cve/CVE-2024-7154.htmlhttps://patchthecve.com/cve/CVE-2024-7154.htmlWed, 17 Jun 2026 08:19:27 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is an unknown function of the file /wizard.html of the component Password Reset Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotelyhttps://patchthecve.com/cve/CVE-2024-37640.htmlhttps://patchthecve.com/cve/CVE-2024-37640.htmlWed, 17 Jun 2026 07:38:42 +0000HIGH 8.8: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWiFiEasyGuestCfg.https://patchthecve.com/cve/CVE-2024-37639.htmlhttps://patchthecve.com/cve/CVE-2024-37639.htmlWed, 17 Jun 2026 07:38:42 +0000HIGH 8.8: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via eport in the function setIpPortFilterRules.https://patchthecve.com/cve/CVE-2024-37637.htmlhttps://patchthecve.com/cve/CVE-2024-37637.htmlWed, 17 Jun 2026 07:38:42 +0000CRITICAL 9.8: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWizardCfg.https://patchthecve.com/cve/CVE-2024-37635.htmlhttps://patchthecve.com/cve/CVE-2024-37635.htmlWed, 17 Jun 2026 07:38:42 +0000CRITICAL 9.8: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfghttps://patchthecve.com/cve/CVE-2024-37634.htmlhttps://patchthecve.com/cve/CVE-2024-37634.htmlWed, 17 Jun 2026 07:38:41 +0000CRITICAL 9.8: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg.https://patchthecve.com/cve/CVE-2024-37633.htmlhttps://patchthecve.com/cve/CVE-2024-37633.htmlWed, 17 Jun 2026 07:38:41 +0000HIGH 8.8: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiGuestCfghttps://patchthecve.com/cve/CVE-2024-37632.htmlhttps://patchthecve.com/cve/CVE-2024-37632.htmlWed, 17 Jun 2026 07:38:41 +0000CRITICAL 9.8: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth .https://patchthecve.com/cve/CVE-2024-37631.htmlhttps://patchthecve.com/cve/CVE-2024-37631.htmlWed, 17 Jun 2026 07:38:41 +0000HIGH 8.8: TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the File parameter in function UploadCustomModule.https://patchthecve.com/cve/CVE-2024-22663.htmlhttps://patchthecve.com/cve/CVE-2024-22663.htmlWed, 17 Jun 2026 07:11:40 +0000CRITICAL 9.8: TOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection vulnerability via setOpModeCfghttps://patchthecve.com/cve/CVE-2024-22662.htmlhttps://patchthecve.com/cve/CVE-2024-22662.htmlWed, 17 Jun 2026 07:11:39 +0000CRITICAL 9.8: TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRuleshttps://patchthecve.com/cve/CVE-2024-22660.htmlhttps://patchthecve.com/cve/CVE-2024-22660.htmlWed, 17 Jun 2026 07:11:39 +0000CRITICAL 9.8: TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCfg