a810r firmware vulnerabilities and fixes

Recent CVEs affecting a810r firmware, with upgrade or downgrade steps. 17 tracked.

Also searched as: a810rfirmware.

a810r firmware has 17 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-05-10. Highest priority: CVE-2025-28137 (score 72/100).

• CVE-2025-4496 HIGH 8.8 MITIGATE MITIGATE A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210
• CVE-2025-28137 CRITICAL 9.8 MITIGATE The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerabi
• CVE-2025-28135 HIGH 7.5 MITIGATE TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cg
• CVE-2025-28037 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth rem
• CVE-2025-28036 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability
• CVE-2025-28035 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability
• CVE-2025-28034 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28033 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28032 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28031 MEDIUM 6.5 MITIGATE TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the telnet service i
• CVE-2025-28030 HIGH 8.8 MITIGATE TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a stack overflow via the startTime and endTim
• CVE-2025-28024 CRITICAL 9.8 MITIGATE TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgi
• CVE-2025-28022 HIGH 7.3 MITIGATE TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cg
• CVE-2025-28021 HIGH 7.3 MITIGATE TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the downloadFil
• CVE-2024-57036 HIGH 8.1 MITIGATE TOTOLINK A810R V4.1.2cu.5032_B20200407 was found to contain a command insertion vulnerability in downloadFile.
• CVE-2024-53335 HIGH 7.8 MITIGATE TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in downloadFlile.cgi.
• CVE-2024-53334 HIGH 8.8 MITIGATE TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in infostat.cgi.

FAQ

How do I fix a810r firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is a810r firmware being exploited right now?

None of the tracked a810r firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which a810r firmware CVE should I patch first?

CVE-2025-28137 currently ranks highest (72/100): The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerabi.

RSS feed for a810r firmware · ← Back to latest CVEs