TI-2025-03979 CVE-2025-4462 · GHSA-g78q-vwc9-9f65
TOTOLINK N150RT formWsc buffer overflow
Priority HIGH 73
A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525.
TOTOLINK
Records1322All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical616CVSS 9.0–10.0
CVSS high434CVSS 7.0–8.9
Exploited now
TOTOLINK records in CISA KEVNo TOTOLINK vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
19 records in N150rt Firmware · all components
TI-2025-03536 CVE-2025-3993 · GHSA-4jwx-pg4r-8w69
TOTOLINK N150RT formWsc buffer overflow
Priority HIGH 73
A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical.
TI-2025-03535 CVE-2025-3992 · GHSA-cpp9-4wg8-29gj
TOTOLINK N150RT formWlwds buffer overflow
Priority HIGH 73
A vulnerability has been found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical.
TI-2025-03534 CVE-2025-3991 · GHSA-53vj-jg5c-244w
TOTOLINK N150RT formWdsEncrypt buffer overflow
Priority HIGH 73
A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525.
TI-2025-03532 CVE-2025-3989 · GHSA-4jgj-9c7f-7hvv
TOTOLINK N150RT formStaticDHCP buffer overflow
Priority HIGH 73
A vulnerability classified as critical was found in TOTOLINK N150RT 3.4.0-B20190525.
TI-2025-03531 CVE-2025-3988 · GHSA-f9mq-j3wx-4h2h
TOTOLINK N150RT formPortFw buffer overflow
Priority HIGH 73
A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525.
TI-2019-14289 CVE-2019-19824 · GHSA-mrf4-89gh-pm62
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute…
Priority HIGH 73
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available.
TI-2019-14290 CVE-2019-19825 · GHSA-qx9v-3w62-8wqf
On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an…
Priority HIGH 65
On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass.
TI-2025-03530 CVE-2025-3987 · GHSA-59gw-jx9x-fx7m
TOTOLINK N150RT formWsc command injection
Priority MEDIUM 57
A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525.
TI-2025-05700 CVE-2025-6299 · GHSA-pmq9-x3vc-v6f7
TOTOLINK N150RT formWSC os command injection
Priority MEDIUM 56
A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525.
TI-2025-03978 CVE-2025-4461 · GHSA-vvw8-h7mx-m7jj
TOTOLINK N150RT Virtual Server Page cross site scripting
Priority MEDIUM 55
A vulnerability classified as problematic was found in TOTOLINK N150RT 3.4.0-B20190525.
TI-2025-03977 CVE-2025-4460 · GHSA-8fpg-8v96-g439
TOTOLINK N150RT URL Filtering Page cross site scripting
Priority MEDIUM 55
A vulnerability classified as problematic has been found in TOTOLINK N150RT 3.4.0-B20190525.
TI-2025-03539 CVE-2025-3996 · GHSA-73qf-p5c4-q7mp
TOTOLINK N150RT MAC Filtering Page home.htm cross site scripting
Priority MEDIUM 55
A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525.
TI-2025-03538 CVE-2025-3995 · GHSA-82h5-4q54-hmm8
TOTOLINK N150RT LAN Settings Page fromStaticDHCP cross site scripting
Priority MEDIUM 55
A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525.
TI-2025-03537 CVE-2025-3994 · GHSA-wf2f-p7f8-m7p2
TOTOLINK N150RT IP Port Filtering home.htm cross site scripting
Priority MEDIUM 55
A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525.
TI-2020-15581 CVE-2020-25499 · GHSA-g4mx-vhr8-g9g7
TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the…
Priority MEDIUM 45
TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'.
TI-2019-14287 CVE-2019-19822 · GHSA-552g-mhvj-f64v
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa…
Priority MEDIUM 44
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords).
TI-2025-03533 CVE-2025-3990 · GHSA-jxcr-pjg6-v566
TOTOLINK N150RT formVlan buffer overflow
Priority MEDIUM 42
A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525.
TI-2019-14288 CVE-2019-19823 · GHSA-vj2g-8grq-fccw
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa…
Priority MEDIUM 42
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file.