Deviceways

Router

TOTOLINK A7000R

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
Hardware revision not specified
Release listed · 25.12.6
Hardware revision not specified
Release listed · 25.12.5
Open hardware recordopenwrt.org
Original project github.com

Recorded configuration: 16 MB flash; 128 MB RAM

First installation
GUI OEM
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

TOTOLINK A7000R — WikiDevi (github.com)

Hardware revision
(U)

OpenWrt

OpenWrt — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM
Availability recorded by source
Available 2024

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 9.8 (v3.1)

TOTOLINK A7000R

In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm.

CVE-2025-51452

Affected firmware
A7000R: 9.1.0u.6115_B20201022
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm.

CVE published

CVSS 9.8 (v3.1)

TOTOLINK A7000R

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service…

CVE-2024-28639

Affected firmware
A7000R: V9.1.0u.6115-B20201022
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service (DoS) via the IP field.

CVE published

CVSS 9.8 (v3.1)

TOTOLINK A7000R

TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg.

CVE-2023-49417

Affected firmware
A7000R: V9.1.0u.6115_B20201022
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg.

CVE published

CVSS 8.8 (v3.1)

TOTOLINK A7000R

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.

CVE-2023-45984

Affected firmware
A7000R: V9.1.0u.6115_B20201022 was discovered to
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.

CVE published

CVSS 8.8 (v3.1)

TOTOLINK A7000R

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.

CVE-2023-36950

Affected firmware
A7000R: V9.1.0u.6115_B20201022 was discovered to
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.

Check more security advisories for this device · CVE.org