Priority HIGH 82
Incorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00604 · Published 2024-08-15 · No fix listed CWE-284
Priority HIGH 82
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06071 · Published 2024-05-24 · No fix listed CWE-121
Priority HIGH 82
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01958 · Published 2023-07-07 · No fix listed CWE-77
Priority HIGH 82
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the ussd parameter in the setUssd function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01958 · Published 2023-07-07 · No fix listed CWE-77
Priority HIGH 82
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01958 · Published 2023-07-07 · No fix listed CWE-77
Priority HIGH 82
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01958 · Published 2023-07-07 · No fix listed CWE-77
Priority HIGH 73
A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00666 · Published 2026-03-27 · No fix listed CWE-119
Priority HIGH 73
A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00736 · Published 2026-01-19 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01007 · Published 2026-01-19 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was determined in Totolink LR350 9.3.5u.6369_B20220309.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00736 · Published 2026-01-19 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00943 · Published 2026-01-19 · No fix listed CWE-119
Priority HIGH 73
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02495 · Published 2022-11-23 · No fix listed CWE-787
Priority HIGH 72
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_421BAC function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-10-31 · No fix listed CWE-121
Priority HIGH 72
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the sub_426EF8 function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-10-31 · No fix listed CWE-121
Priority HIGH 72
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_425400 function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-10-31 · No fix listed CWE-121
Priority HIGH 72
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the sub_426EF8 function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-10-31 · No fix listed CWE-121
Priority HIGH 72
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_422880 function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-10-31 · No fix listed CWE-121
Priority HIGH 72
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_42396C function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-10-31 · No fix listed CWE-121
Priority HIGH 72
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub_4232EC function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-10-31 · No fix listed CWE-121
Priority HIGH 70
A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.01554 · Published 2024-11-01 · No fix listed CWE-266
Priority MEDIUM 59
A vulnerability has been found in TOTOLINK LR350 9.3.5u.6369_B20220309 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.03152 · Published 2024-07-30 · No fix listed CWE-77
Priority MEDIUM 57
A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.02636 · Published 2026-01-19 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.03043 · Published 2026-01-19 · No fix listed CWE-74
Priority MEDIUM 53
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function via long post data.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02321 · Published 2022-11-23 · No fix listed CWE-787
Priority MEDIUM 53
TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the setUploadSetting function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01853 · Published 2022-11-23 · No fix listed CWE-78
Load more
THREATIST.IORead the docs