Totolink A6000r Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Totolink A6000r Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2024-41316 — CVSS 9.8 (critical): TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the…
• CVE-2024-41319 — CVSS 9.8 (critical): TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the cmd parameter in the webcmd…
• CVE-2024-41318 — CVSS 9.8 (critical): TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the…
• CVE-2024-37626 — CVSS 8.8 (high): A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the…
• CVE-2024-41320 — CVSS 8.8 (high): TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the…
• CVE-2024-41317 — CVSS 8.0 (high): TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the…
• CVE-2024-57211 — CVSS 8.0 (high): TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the…
• CVE-2024-41315 — CVSS 6.8 (medium): TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the…
• CVE-2024-41314 — CVSS 6.8 (medium): TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface parameter in the…
• CVE-2024-57213 — CVSS 6.3 (medium): TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the…
• CVE-2024-57214 — CVSS 6.3 (medium): TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the…
• CVE-2025-3249 — CVSS 6.3 (medium): A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability is the function…
• CVE-2024-57212 — CVSS 5.1 (medium): TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the…