PatchTheCVE: a810r firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-4496: A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210https://patchthecve.com/cve/CVE-2025-4496.htmlhttps://patchthecve.com/cve/CVE-2025-4496.htmlWed, 17 Jun 2026 09:33:22 +0000HIGH 8.8: A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to bufferCVE-2025-28022: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cghttps://patchthecve.com/cve/CVE-2025-28022.htmlhttps://patchthecve.com/cve/CVE-2025-28022.htmlWed, 17 Jun 2026 09:04:28 +0000HIGH 7.3: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.CVE-2025-28021: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the downloadFilhttps://patchthecve.com/cve/CVE-2025-28021.htmlhttps://patchthecve.com/cve/CVE-2025-28021.htmlWed, 17 Jun 2026 09:04:28 +0000HIGH 7.3: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the downloadFile.cgi through the v14 and v3 parametersCVE-2025-28036: TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerabilityhttps://patchthecve.com/cve/CVE-2025-28036.htmlhttps://patchthecve.com/cve/CVE-2025-28036.htmlWed, 17 Jun 2026 09:04:30 +0000CRITICAL 9.8: TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.CVE-2025-28035: TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability https://patchthecve.com/cve/CVE-2025-28035.htmlhttps://patchthecve.com/cve/CVE-2025-28035.htmlWed, 17 Jun 2026 09:04:30 +0000CRITICAL 9.8: TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.CVE-2025-28037: TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remhttps://patchthecve.com/cve/CVE-2025-28037.htmlhttps://patchthecve.com/cve/CVE-2025-28037.htmlWed, 17 Jun 2026 09:04:30 +0000CRITICAL 9.8: TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the setDiagnosisCfg function through the ipDomain parameter.CVE-2025-28031: TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the telnet service ihttps://patchthecve.com/cve/CVE-2025-28031.htmlhttps://patchthecve.com/cve/CVE-2025-28031.htmlWed, 17 Jun 2026 09:04:29 +0000MEDIUM 6.5: TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini.CVE-2025-28030: TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a stack overflow via the startTime and endTimhttps://patchthecve.com/cve/CVE-2025-28030.htmlhttps://patchthecve.com/cve/CVE-2025-28030.htmlWed, 17 Jun 2026 09:04:29 +0000HIGH 8.8: TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a stack overflow via the startTime and endTime parameters in setParentalRules function.CVE-2025-28024: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgihttps://patchthecve.com/cve/CVE-2025-28024.htmlhttps://patchthecve.com/cve/CVE-2025-28024.htmlWed, 17 Jun 2026 09:04:28 +0000CRITICAL 9.8: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgiCVE-2025-28034: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG Vhttps://patchthecve.com/cve/CVE-2025-28034.htmlhttps://patchthecve.com/cve/CVE-2025-28034.htmlWed, 17 Jun 2026 09:04:30 +0000CRITICAL 9.8: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost functiCVE-2025-28033: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG Vhttps://patchthecve.com/cve/CVE-2025-28033.htmlhttps://patchthecve.com/cve/CVE-2025-28033.htmlWed, 17 Jun 2026 09:04:29 +0000HIGH 7.3: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through tCVE-2025-28032: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG Vhttps://patchthecve.com/cve/CVE-2025-28032.htmlhttps://patchthecve.com/cve/CVE-2025-28032.htmlWed, 17 Jun 2026 09:04:29 +0000HIGH 7.3: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm paraCVE-2025-28137: The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerabihttps://patchthecve.com/cve/CVE-2025-28137.htmlhttps://patchthecve.com/cve/CVE-2025-28137.htmlWed, 17 Jun 2026 09:04:35 +0000CRITICAL 9.8: The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.CVE-2025-28135: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cghttps://patchthecve.com/cve/CVE-2025-28135.htmlhttps://patchthecve.com/cve/CVE-2025-28135.htmlWed, 17 Jun 2026 09:04:35 +0000HIGH 7.5: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi.CVE-2024-57036: TOTOLINK A810R V4.1.2cu.5032_B20200407 was found to contain a command insertion vulnerability in downloadFile.https://patchthecve.com/cve/CVE-2024-57036.htmlhttps://patchthecve.com/cve/CVE-2024-57036.htmlWed, 17 Jun 2026 08:13:13 +0000HIGH 8.1: TOTOLINK A810R V4.1.2cu.5032_B20200407 was found to contain a command insertion vulnerability in downloadFile.cgi main function. This vulnerability allows an attacker to execute arbitrary commands by sending HTTP request.CVE-2024-53335: TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in downloadFlile.cgi.https://patchthecve.com/cve/CVE-2024-53335.htmlhttps://patchthecve.com/cve/CVE-2024-53335.htmlWed, 17 Jun 2026 08:08:48 +0000HIGH 7.8: TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in downloadFlile.cgi.CVE-2024-53334: TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in infostat.cgi.https://patchthecve.com/cve/CVE-2024-53334.htmlhttps://patchthecve.com/cve/CVE-2024-53334.htmlWed, 17 Jun 2026 08:08:48 +0000HIGH 8.8: TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in infostat.cgi.