Totolink x15 Firmware vulnerabilities

25 CVEs affecting Totolink x15 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-8246, published 2025-07-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-5502, published 2025-06-03. Critical severity, CVSS 9.8. EPSS: 8.9% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this issue is the function formMapReboot of the file /boafrm/formMapReboot. The…
CVE-2025-5739, published 2025-06-06. High severity, CVSS 8.8. EPSS: 6.4% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part of the file /boafrm/formSaveConfig of the component HTTP POST Request Handler.…
CVE-2025-5790, published 2025-06-06. Medium severity, CVSS 6.5. EPSS: 6.2% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. This vulnerability affects unknown code of the file /boafrm/formIpQoS of the component HTTP POST Request…
CVE-2025-5788, published 2025-06-06. Medium severity, CVSS 6.5. EPSS: 6.2% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formReflashClientTbl of the…
CVE-2025-5787, published 2025-06-06. Medium severity, CVSS 6.5. EPSS: 6.2% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWsc of the…
CVE-2025-5786, published 2025-06-06. Medium severity, CVSS 6.5. EPSS: 6.2% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formDMZ of the component HTTP POST Request…
CVE-2025-5785, published 2025-06-06. Medium severity, CVSS 6.5. EPSS: 6.2% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWirelessTbl of the component HTTP POST…
CVE-2025-5503, published 2025-06-03. High severity, CVSS 8.8. EPSS: 5.8% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. This affects the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the…
CVE-2025-8244, published 2025-07-27. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formMapDelDevice of the component HTTP POST…
CVE-2025-6146, published 2025-06-17. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. This affects an unknown part of the file /boafrm/formSysLog of the component HTTP POST Request…

Latest

CVE-2025-8246, published 2025-07-27. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formRoute of the component HTTP…
CVE-2025-8245, published 2025-07-27. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAPVLAN of the…
CVE-2025-8243, published 2025-07-27. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formMapDel of the component HTTP POST Request…
CVE-2025-8242, published 2025-07-27. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST…
CVE-2025-6824, published 2025-06-28. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST…
CVE-2025-6402, published 2025-06-21. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formIpv6Setup of the component HTTP POST…
CVE-2025-6399, published 2025-06-21. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST Request…
CVE-2025-6165, published 2025-06-17. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formTmultiAP of the component HTTP POST…
CVE-2025-6150, published 2025-06-17. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAP of the component HTTP…