totolink a7000r firmware
productUScpe:2.3:o:totolink:a7000r_firmware:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
by severity
12critical14high0medium0low
updated 2026-10-29
01
vulnerabilities (35)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2024-28640US | — | — |
| CVE-2022-27005US | critical9.8 | — |
| CVE-2026-1548US | high8.8 | — |
| CVE-2026-1547US | critical9.8 | — |
| CVE-2022-27004US | critical9.8 | — |
| CVE-2022-27003US | critical9.8 | — |
| CVE-2026-1623US | — | — |
| CVE-2026-1601US | — | — |
| CVE-2024-28639US | critical9.8 | — |
| CVE-2022-37079US | high7.8 | — |
| CVE-2024-7213US | high8.8 | — |
| CVE-2023-36950US | critical9.8 | — |
| CVE-2023-36947US | critical9.8 | — |
| CVE-2024-7212US | high8.8 | — |
| CVE-2022-37083US | high7.8 | — |
| CVE-2022-37082US | high7.8 | — |
| CVE-2022-37081US | high7.8 | — |
| CVE-2022-37076US | high7.8 | — |
| CVE-2022-32993US | critical9.8 | — |
| CVE-2023-45985US | high7.5 | — |
| CVE-2023-49418US | critical9.8 | — |
| CVE-2023-49417US | critical9.8 | — |
| CVE-2022-37078US | high7.8 | — |
| CVE-2023-45984US | critical9.8 | — |
| CVE-2025-63459US | — | — |
| CVE-2025-63462US | — | — |
| CVE-2025-63461US | — | — |
| CVE-2025-63460US | — | — |
| CVE-2025-63154US | — | — |
| CVE-2025-63153US | — | — |
| CVE-2025-51452US | critical9.8OT elevated | — |
| CVE-2022-37084US | high7.8 | — |
| CVE-2022-37080US | high7.8 | — |
| CVE-2022-37077US | high7.8 | — |
| CVE-2022-37075US | high7.8 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-787Out-of-bounds Write11 CVEs
- CWE-121Stack-based Buffer Overflow9 CVEs
- CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')8 CVEs
- CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')5 CVEs
- CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')4 CVEs
- CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
- CWE-125Out-of-bounds Read1 CVEs
- CWE-288Authentication Bypass Using an Alternate Path or Channel1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE35 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan