a830r firmware vulnerabilities and fixes

Recent CVEs affecting a830r firmware, with upgrade or downgrade steps. 10 tracked.

Also searched as: a830rfirmware.

a830r firmware has 10 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-04-23. Highest priority: CVE-2025-28036 (score 62/100).

• CVE-2025-28036 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability
• CVE-2025-28035 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability
• CVE-2025-28034 CRITICAL 9.8 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28033 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28032 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V
• CVE-2025-28029 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310
• CVE-2025-28028 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310
• CVE-2025-28027 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310
• CVE-2025-28026 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310
• CVE-2025-28025 HIGH 7.3 MITIGATE MITIGATE TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A310

FAQ

How do I fix a830r firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is a830r firmware being exploited right now?

None of the tracked a830r firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which a830r firmware CVE should I patch first?

CVE-2025-28036 currently ranks highest (62/100): TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability.

RSS feed for a830r firmware · ← Back to latest CVEs