TI-2024-00271 CVE-2024-0296 · GHSA-5pwx-9pq2-mxqx
Totolink N200RE cstecgi.cgi NTPSyncWithHost os command injection
Priority HIGH 82
A vulnerability has been found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical.
TOTOLINK
Records1322All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical616CVSS 9.0–10.0
CVSS high434CVSS 7.0–8.9
Exploited now
TOTOLINK records in CISA KEVNo TOTOLINK vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
21 records in N200re Firmware · all components
TI-2024-00274 CVE-2024-0299 · GHSA-h52q-mc3p-44c8
Totolink N200RE cstecgi.cgi setTracerouteCfg os command injection
Priority HIGH 81
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
TI-2024-00273 CVE-2024-0298 · GHSA-p2xj-99fc-824q
Totolink N200RE cstecgi.cgi setDiagnosisCfg os command injection
Priority HIGH 81
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
TI-2024-00272 CVE-2024-0297 · GHSA-m8hm-22wv-cf8j
Totolink N200RE cstecgi.cgi UploadFirmwareFile os command injection
Priority HIGH 81
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical.
TI-2024-00926 CVE-2024-1003 · GHSA-9h4j-w5f8-xjpc
Totolink N200RE cstecgi.cgi setLanguageCfg stack-based overflow
Priority HIGH 73
A vulnerability, which was classified as critical, has been found in Totolink N200RE 9.3.5u.6139_B20201216.
TI-2024-00925 CVE-2024-1002 · GHSA-j8jv-qh5w-hrq5
Totolink N200RE cstecgi.cgi setIpPortFilterRules stack-based overflow
Priority HIGH 73
A vulnerability classified as critical was found in Totolink N200RE 9.3.5u.6139_B20201216.
TI-2024-00921 CVE-2024-0998 · GHSA-h3vc-4gq7-6h97
Totolink N200RE cstecgi.cgi setDiagnosisCfg stack-based overflow
Priority HIGH 73
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
TI-2024-00920 CVE-2024-0997 · GHSA-5jgq-vcw8-3624
Totolink N200RE cstecgi.cgi setOpModeCfg stack-based overflow
Priority HIGH 73
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical.
TI-2019-14289 CVE-2019-19824 · GHSA-mrf4-89gh-pm62
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute…
Priority HIGH 73
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available.
TI-2024-00927 CVE-2024-1004 · GHSA-8vhj-m4qr-2chr
Totolink N200RE cstecgi.cgi loginAuth stack-based overflow
Priority HIGH 71
A vulnerability, which was classified as critical, was found in Totolink N200RE 9.3.5u.6139_B20201216.
TI-2019-14290 CVE-2019-19825 · GHSA-qx9v-3w62-8wqf
On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an…
Priority HIGH 65
On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass.
TI-2025-35197 CVE-2025-55893 · GHSA-96fj-xf34-6gmc
TOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via hostName.
Priority MEDIUM 62
TOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via hostName.
TI-2025-06516 CVE-2025-7154 · GHSA-8phr-4rr8-jx8r
TOTOLINK N200RE cstecgi.cgi sub_41A0F8 os command injection
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B20201216.
TI-2025-35198 CVE-2025-55895 · GHSA-m6vv-4wpw-vqfc
TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and…
Priority MEDIUM 47
TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control.
TI-2024-00924 CVE-2024-1001 · GHSA-7c4r-p7c4-2rmg
Totolink N200RE cstecgi.cgi main stack-based overflow
Priority MEDIUM 45
A vulnerability classified as critical has been found in Totolink N200RE 9.3.5u.6139_B20201216.
TI-2019-14287 CVE-2019-19822 · GHSA-552g-mhvj-f64v
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa…
Priority MEDIUM 44
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords).
TI-2024-00923 CVE-2024-1000 · GHSA-qrpx-55hc-9pr8
Totolink N200RE cstecgi.cgi setTracerouteCfg stack-based overflow
Priority MEDIUM 43
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
TI-2024-00922 CVE-2024-0999 · GHSA-xw8g-vjxc-xg4v
Totolink N200RE cstecgi.cgi setParentalRules stack-based overflow
Priority MEDIUM 43
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
TI-2019-14288 CVE-2019-19823 · GHSA-vj2g-8grq-fccw
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa…
Priority MEDIUM 42
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file.
TI-2020-14617 CVE-2020-23617 · GHSA-652g-xm3x-m224
A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and…
Priority LOW 28
A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers to execute arbitrary web scripts or HTML via SCRIPT element.
TI-2023-02613 CVE-2023-2790 · GHSA-f83j-6rqj-vhpw
TOTOLINK N200RE Telnet Service custom.conf password in configuration file
Priority LOW 25
A vulnerability classified as problematic has been found in TOTOLINK N200RE 9.3.5u.6255_B20211224.