CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,488 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,488
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product totolink:a3300r_firmware. Show all products

37 CVEs, showing 1 to 37
CVESeverityTitlePublished
CVE-2025-12239Critical 9.8A weakness has been identified in TOTOLINK A3300R 17.0.0cu.557_B20221024.Oct 27, 2025
CVE-2025-12240Critical 9.8A security vulnerability has been detected in TOTOLINK A3300R 17.0.0cu.557_B20221024.Oct 27, 2025
CVE-2025-12241High 8.8A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024.Oct 27, 2025
CVE-2025-12258High 8.8A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024.Oct 27, 2025
CVE-2025-12259High 8.8A flaw has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024.Oct 27, 2025
CVE-2025-12260High 8.8A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024.Oct 27, 2025
CVE-2025-55901Medium 6.5TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.Dec 15, 2025
CVE-2025-55895Critical 9.1TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control.Dec 15, 2025
CVE-2026-5101High 8.8A vulnerability was identified in Totolink A3300R 17.0.0cu.557_b20221024.Mar 29, 2026
CVE-2026-5102High 8.8A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024.Mar 30, 2026
CVE-2026-5103High 8.8A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024.Mar 30, 2026
CVE-2026-5104High 8.8A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024.Mar 30, 2026
CVE-2026-5105High 8.8A vulnerability was detected in Totolink A3300R 17.0.0cu.557_b20221024.Mar 30, 2026
CVE-2026-5176Critical 9.8A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024.Mar 31, 2026
CVE-2026-5177High 8.8A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024.Mar 31, 2026
CVE-2026-5178High 8.8A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024.Mar 31, 2026
CVE-2026-31170Critical 9.8An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun-pass parameter to /cgi-bin/cstecgi.cgi.Apr 9, 2026
CVE-2026-31159Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the password parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31160Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the provider parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31164Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeMtu parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31165Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeServiceName parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31171Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the url parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31172Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the user parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31174Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the informEnable parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31175Critical 9.8An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunEnable parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31176Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun_user parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31177Critical 9.8An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMinAlive parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31178Critical 9.8An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMaxAlive parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31179Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunPort parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31181Critical 9.8An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunServerAddr parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31162Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the ttlWay parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31163Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the dhcpMtu parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31166Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the hour parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31167Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the mode parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31168Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the recHour parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31169Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the week parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
CVE-2026-31173Medium 6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the interval parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.