totolink a720r firmware

Name: totolink a720r firmware
Brand: totolink

productUS

cpe:2.3:o:totolink:a720r_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

9critical11high2medium0low

updated 2026-10-29

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-4270US	high7.5	14.0% (97th)	—	no fix	2025-05-05	= 4.1.5cu.374
CVE-2021-35325US	high7.5	13.3% (96th)	—	no fix	2021-08-05	= 4.1.5cu.470_b20200911
CVE-2021-35324US	critical9.8	10.4% (96th)	—	no fix	2021-08-05	= 4.1.5cu.470_b20200911
CVE-2021-27710US	critical9.8	7.90% (95th)	—	no fix	2021-04-14	= 4.1.5cu.470_b20200911
CVE-2021-27708US	critical9.8	7.61% (95th)	—	no fix	2021-04-14	= 4.1.5cu.470_b20200911
CVE-2021-45742US	critical9.8	3.07% (88th)	—	no fix	2022-02-04	= 4.1.5cu.470_b20200911
CVE-2021-44247US	critical9.8	2.78% (86th)	—	no fix	2022-02-04	= 4.1.5cu.470_b20200911
CVE-2021-35326US	high7.5	2.54% (85th)	—	no fix	2021-08-05	= 4.1.5cu.470_b20200911
CVE-2022-38535US	high7.2	2.12% (82nd)	—	no fix	2022-09-15	= 4.1.5cu.374
CVE-2022-38534US	high7.2	2.12% (82nd)	—	no fix	2022-09-15	= 4.1.5cu.374
CVE-2024-8869US	high8.1	1.68% (77th)	—	no fix	2024-09-15	= 4.1.5
CVE-2025-60682US	—	1.45% (73rd)	—	no fix	2025-11-13	= 4.1.5cu.614_b20230630
CVE-2021-35327US	critical9.8OT elevated	1.38% (72nd)	—	no fix	2021-08-05	= 4.1.5cu.470_b20200911
CVE-2021-45740US	critical9.8	1.36% (72nd)	—	no fix	2022-02-04	= 4.1.5cu.470_b20200911
CVE-2021-45739US	high7.5	1.18% (67th)	—	no fix	2022-02-04	= 4.1.5cu.470_b20200911
CVE-2021-45737US	high7.5	1.18% (67th)	—	no fix	2022-02-04	= 4.1.5cu.470_b20200911
CVE-2021-44246US	high7.5	1.18% (67th)	—	no fix	2022-02-04	= 4.1.5cu.470_b20200911
CVE-2025-4268US	—OT elevated	1.12% (66th)	—	no fix	2025-05-05	= 4.1.5cu.374
CVE-2025-60683US	—	1.01% (63rd)	—	no fix	2025-11-13	= 4.1.5cu.614_b20230630
CVE-2022-36456US	high7.8	1.01% (63rd)	—	no fix	2022-08-25	= 4.1.5cu.532_b20210610
CVE-2025-9303US	critical9.8	0.90% (60th)	—	no fix	2025-08-21	= 4.1.5cu.630_b20250509
CVE-2023-23064US	critical9.8OT elevated	0.70% (53rd)	—	no fix	2023-02-17	= 4.1.5cu.532_b20210610
CVE-2025-4271US	—	0.66% (52nd)	—	no fix	2025-05-05	= 4.1.5cu.374
CVE-2025-4269US	medium5.3	0.59% (48th)	—	no fix	2025-05-05	= 4.1.5cu.374
CVE-2021-43662US	medium6.5	0.55% (46th)	—	no fix	2022-03-31	= 4.1.5cu.470_b20200911
CVE-2022-36610US	high7.8OT elevated	0.30% (22nd)	—	no fix	2022-08-29	= 4.1.5cu.532_b20210610
CVE-2025-60686US	—	0.24% (15th)	—	no fix	2025-11-13	= 4.1.5cu.614_b20230630
CVE-2025-60685US	—	0.24% (15th)	—	no fix	2025-11-13	= 4.1.5cu.614_b20230630

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-121Stack-based Buffer Overflow6 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')4 CVEs
CWE-284Improper Access Control3 CVEs
CWE-287Improper Authentication3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan