a800r firmware vulnerabilities and fixes

Recent CVEs affecting a800r firmware, with upgrade or downgrade steps. 12 tracked.

Also searched as: a800rfirmware.

a800r firmware has 12 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-05-10. Highest priority: CVE-2025-28036 (score 62/100).

• CVE-2025-4496 HIGH 8.8 MITIGATE MITIGATE A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210
• CVE-2025-28138 CRITICAL 9.8 MITIGATE The TOTOLINK A800R V4.1.2cu.5137_B20200730 were found to contain a pre-auth remote command execution vulnerabi
• CVE-2025-28136 MEDIUM 6.5 MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFil
• CVE-2025-28036 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability
• CVE-2025-28035 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability
• CVE-2025-28034 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28033 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28032 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28020 HIGH 7.3 MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cg
• CVE-2025-28019 HIGH 7.3 MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFil
• CVE-2025-28018 HIGH 7.3 MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cg
• CVE-2025-28017 MEDIUM 6.5 MITIGATE TOTOLINK A800R V4.1.2cu.5032_B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERY_ST

FAQ

How do I fix a800r firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is a800r firmware being exploited right now?

None of the tracked a800r firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which a800r firmware CVE should I patch first?

CVE-2025-28036 currently ranks highest (62/100): TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability.

RSS feed for a800r firmware · ← Back to latest CVEs