A720r firmware

This hub aggregates every CVE we track for A720r firmware, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting A720r firmware.

• CVE-2025-60683A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary, specifically in the sub_40BFA4 function that handles network interfa...6.5Nov 13, 2025
• CVE-2025-60686A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers (A720R V4.1.5cu.614_B20230630, LR1200GB V9.1.0u.6619_B20230130, and NR1800X...5.1Nov 13, 2025
• CVE-2025-60685A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary (sub_401EE0 function). The binary reads the /proc/stat file using fgets() into ...5.1Nov 13, 2025
• CVE-2025-60682A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the cloudupdate_check binary, specifically in the sub_402414 function that handles cloud...6.5Nov 13, 2025
• CVE-2025-9303TOTOLINK A720R cstecgi.cgi setParentalRules buffer overflow8.8Aug 21, 2025
• CVE-2025-4271TOTOLINK A720R cstecgi.cgi information disclosure5.3May 5, 2025
• CVE-2025-4270TOTOLINK A720R Config cstecgi.cgi information disclosure5.3May 5, 2025
• CVE-2025-4269TOTOLINK A720R Log cstecgi.cgi access control6.5May 5, 2025
• CVE-2025-4268TOTOLINK A720R cstecgi.cgi missing authentication5.3May 5, 2025
• CVE-2024-8869TOTOLINK A720R exportOvpn os command injection5.0Sep 15, 2024
• CVE-2023-23064TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control.9.8Feb 17, 2023
• CVE-2022-38535TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg function.7.2Sep 15, 2022
• CVE-2022-38534TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setdiagnosicfg function.7.2Sep 15, 2022
• CVE-2022-36610TOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample.7.8Aug 28, 2022
• CVE-2022-36456TOTOLink A720R V4.1.5cu.532_B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi.7.8Aug 25, 2022