Totolink A6000R vulnerabilities
13 vulnerabilities
Known vulnerabilities in Totolink A6000R, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-3249totolinka6000r_firmware
EPSS score2.76%
A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability is the function apcli_cancel_wps of the file /usr/lib/lua/luci/controller/mtkwifi.lua. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.CVE-2024-41314totolinka6000r_firmwareEPSS score2.08%
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function.CVE-2024-41317totolinka6000r_firmwareEPSS score2.29%
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function.CVE-2024-41320totolinka6000r_firmwareEPSS score2.24%
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the get_apcli_conn_info function.CVE-2024-41316totolinka6000r_firmwareEPSS score2.47%
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function.CVE-2024-41319totolinka6000r_firmwareEPSS score5.55%
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the cmd parameter in the webcmd function.CVE-2024-41315totolinka6000r_firmwareEPSS score2.12%
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function.CVE-2024-41318totolinka6000r_firmwareEPSS score2.43%
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function.CVE-2024-37626totolinka6000r_firmwareEPSS score1.50%
A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vif_enable function.CVE-2024-57211totolinka6000r_firmwareEPSS score1.28%
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function.CVE-2024-57213totolinka6000r_firmwareEPSS score0.72%
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the action_passwd function.CVE-2024-57214totolinka6000r_firmwareEPSS score0.72%
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.CVE-2024-57212totolinka6000r_firmwareEPSS score0.76%
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the action_reboot function.