totolink a950rg firmware

Name: totolink a950rg firmware
Brand: totolink

productUS

cpe:2.3:o:totolink:a950rg_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

12critical2high0medium0low

updated 2026-10-28

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-45797US	critical9.8	18.3% (97th)	—	no fix	2025-05-08	= 4.1.2cu.5204_b20210112
CVE-2022-25082US	critical9.8	13.7% (96th)	—	no fix	2022-02-24	2 versions
CVE-2022-26210US	critical9.8	5.69% (93rd)	—	no fix	2022-03-15	= 4.1.2cu.5161_b20200903
CVE-2022-28935US	high7.2	3.30% (88th)	—	no fix	2022-07-06	= 4.1.2cu.5161_b20200903
CVE-2022-26214US	critical9.8	2.78% (86th)	—	no fix	2022-03-15	= 4.1.2cu.5161_b20200903
CVE-2022-26212US	critical9.8	2.78% (86th)	—	no fix	2022-03-15	= 4.1.2cu.5161_b20200903
CVE-2022-26211US	critical9.8	2.78% (86th)	—	no fix	2022-03-15	= 4.1.2cu.5161_b20200903
CVE-2022-26208US	critical9.8	2.78% (86th)	—	no fix	2022-03-15	= 4.1.2cu.5161_b20200903
CVE-2025-60702US	—	2.56% (85th)	—	no fix	2025-11-13	= 5.9c.4592_b20191022
CVE-2022-26209US	critical9.8	2.22% (83rd)	—	no fix	2022-03-15	= 4.1.2cu.5161_b20200903
CVE-2022-26207US	critical9.8	2.22% (83rd)	—	no fix	2022-03-15	= 4.1.2cu.5161_b20200903
CVE-2022-26206US	critical9.8	2.22% (83rd)	—	no fix	2022-03-15	= 4.1.2cu.5161_b20200903
CVE-2025-28036US	—	1.36% (72nd)	—	no fix	2025-04-22	= 4.1.2cu.5161_b20200903
CVE-2025-28035US	—	1.36% (72nd)	—	no fix	2025-04-22	= 4.1.2cu.5161_b20200903
CVE-2025-28034US	—	1.36% (72nd)	—	no fix	2025-04-22	= 4.1.2cu.5161_b20200903
CVE-2025-45798US	critical9.8	1.34% (71st)	—	no fix	2025-05-08	= 4.1.2cu.5204_b20210112
CVE-2025-4496US	critical9.8	1.23% (69th)	—	no fix	2025-05-10	= 4.1.8cu.5241_b20210927
CVE-2025-28037US	—	1.23% (69th)	—	no fix	2025-04-22	= 4.1.2cu.5182_b20201026
CVE-2025-45800US	—	0.95% (61st)	—	no fix	2025-05-02	= 4.1.2cu.5204_b20210112
CVE-2025-60699US	—	0.90% (60th)	—	no fix	2025-11-13	= 5.9c.4592_b20191022
CVE-2025-67186US	—	0.81% (57th)	—	no fix	2026-02-03	= 4.1.2cu.5204_b20210112
CVE-2025-67188US	—	0.69% (53rd)	—	no fix	2026-02-03	= 4.1.2cu.5204_b20210112
CVE-2025-67187US	—	0.51% (43rd)	—	no fix	2026-02-03	= 4.1.2cu.5204_b20210112
CVE-2025-67189US	—	0.46% (40th)	—	no fix	2026-02-03	= 4.1.2cu.5204_b20210112
CVE-2025-28028US	—	0.40% (34th)	—	no fix	2025-04-23	= 4.1.2cu.5161_b20200903
CVE-2025-28025US	—	0.40% (34th)	—	no fix	2025-04-23	= 4.1.2cu.5161_b20200903
CVE-2025-28029US	—	0.40% (34th)	—	no fix	2025-04-22	= 4.1.2cu.5161_b20200903
CVE-2025-28027US	—	0.40% (34th)	—	no fix	2025-04-22	= 4.1.2cu.5161_b20200903
CVE-2025-28026US	—	0.40% (34th)	—	no fix	2025-04-22	= 4.1.2cu.5161_b20200903
CVE-2025-28033US	—	0.40% (34th)	—	no fix	2025-04-22	= 4.1.2cu.5161_b20200903
CVE-2025-44655US	—	0.38% (32nd)	—	no fix	2025-07-21	= 5.9
CVE-2025-28032US	—	0.34% (28th)	—	no fix	2025-04-22	= 4.1.2cu.5161_b20200903
CVE-2022-36612US	high7.8OT elevated	0.30% (22nd)	—	no fix	2022-08-29	= 4.1.2cu.5204_b20210112

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')14 CVEs
CWE-121Stack-based Buffer Overflow8 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')6 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')6 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-787Out-of-bounds Write1 CVEs
CWE-798Use of Hard-coded Credentials1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan