Totolink a3000ru Firmware vulnerabilities

25 CVEs affecting Totolink a3000ru Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-4496, published 2025-05-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-25075, published 2022-02-24. Critical severity, CVSS 9.8. EPSS: 56.2% chance of exploitation in the next 30 days. TOTOLink A3000RU V5.9c.2280_B20180512 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the…
CVE-2022-26210, published 2022-03-15. Critical severity, CVSS 9.8. EPSS: 5.7% chance of exploitation in the next 30 days. Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026…
CVE-2022-28935, published 2022-07-06. High severity, CVSS 7.2. EPSS: 3.3% chance of exploitation in the next 30 days. Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU V5.9c.5185_B20201128,…
CVE-2022-26214, published 2022-03-15. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026…
CVE-2022-26212, published 2022-03-15. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026…
CVE-2022-26211, published 2022-03-15. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026…
CVE-2022-26208, published 2022-03-15. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026…
CVE-2022-26209, published 2022-03-15. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026…
CVE-2022-26207, published 2022-03-15. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026…
CVE-2022-26206, published 2022-03-15. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026…

Latest

CVE-2025-4496, published 2025-05-10. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function…
CVE-2025-28028, published 2025-04-23. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in…
CVE-2025-28025, published 2025-04-23. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in…
CVE-2025-28036, published 2025-04-22. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
CVE-2025-28035, published 2025-04-22. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
CVE-2025-28029, published 2025-04-22. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in…
CVE-2025-28027, published 2025-04-22. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow vulnerability in…
CVE-2025-28026, published 2025-04-22. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in…
CVE-2025-28034, published 2025-04-22. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129…
CVE-2025-28033, published 2025-04-22. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129…