totolink a3000ru firmware

Name: totolink a3000ru firmware
Brand: totolink

productUS

cpe:2.3:o:totolink:a3000ru_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

10critical3high0medium0low

updated 2026-10-28

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-25075US	critical9.8	56.2% (99th)	—	no fix	2022-02-24	= v5.9c.2280_b20180512
CVE-2022-26210US	critical9.8	5.69% (93rd)	—	no fix	2022-03-15	= 5.9c.5185_b20201128
CVE-2022-28935US	high7.2	3.30% (88th)	—	no fix	2022-07-06	= 5.9c.5185_b20201128
CVE-2022-26214US	critical9.8	2.78% (86th)	—	no fix	2022-03-15	= 5.9c.5185_b20201128
CVE-2022-26212US	critical9.8	2.78% (86th)	—	no fix	2022-03-15	= 5.9c.5185_b20201128
CVE-2022-26211US	critical9.8	2.78% (86th)	—	no fix	2022-03-15	= 5.9c.5185_b20201128
CVE-2022-26208US	critical9.8	2.78% (86th)	—	no fix	2022-03-15	= 5.9c.5185_b20201128
CVE-2022-26209US	critical9.8	2.22% (83rd)	—	no fix	2022-03-15	= 5.9c.5185_b20201128
CVE-2022-26207US	critical9.8	2.22% (83rd)	—	no fix	2022-03-15	= 5.9c.5185_b20201128
CVE-2022-26206US	critical9.8	2.22% (83rd)	—	no fix	2022-03-15	= 5.9c.5185_b20201128
CVE-2025-28036US	—	1.36% (72nd)	—	no fix	2025-04-22	= 5.9c.5185_b20201128
CVE-2025-28035US	—	1.36% (72nd)	—	no fix	2025-04-22	= 5.9c.5185_b20201128
CVE-2025-28034US	—	1.36% (72nd)	—	no fix	2025-04-22	= 5.9c.5185_b20201128
CVE-2025-4496US	critical9.8	1.23% (69th)	—	no fix	2025-05-10	= 4.1.8cu.5241_b20210927
CVE-2024-7170US	high8.8OT elevated	0.75% (55th)	—	no fix	2024-07-28	= 5.9c.5185_b20201128
CVE-2025-2955US	—	0.67% (52nd)	—	no fix	2025-03-30	≤ 5.9c.5185
CVE-2025-2688US	—	0.55% (46th)	—	no fix	2025-03-24	≤ 5.9c.5185
CVE-2025-28028US	—	0.40% (34th)	—	no fix	2025-04-23	= 5.9c.5185_b20201128
CVE-2025-28025US	—	0.40% (34th)	—	no fix	2025-04-23	= 5.9c.5185_b20201128
CVE-2025-28029US	—	0.40% (34th)	—	no fix	2025-04-22	= 5.9c.5185_b20201128
CVE-2025-28027US	—	0.40% (34th)	—	no fix	2025-04-22	= 5.9c.5185_b20201128
CVE-2025-28026US	—	0.40% (34th)	—	no fix	2025-04-22	= 5.9c.5185_b20201128
CVE-2025-28033US	—	0.40% (34th)	—	no fix	2025-04-22	= 5.9c.5185_b20201128
CVE-2025-28032US	—	0.34% (28th)	—	no fix	2025-04-22	= 5.9c.5185_b20201128
CVE-2022-36615US	high7.8OT elevated	0.30% (22nd)	—	no fix	2022-08-29	= 4.1.2cu.5185_b20201128

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')12 CVEs
CWE-121Stack-based Buffer Overflow5 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-798Use of Hard-coded Credentials2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE25 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan