TOTOLINK

Records1322All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical616CVSS 9.0–10.0

CVSS high434CVSS 7.0–8.9

Exploited now

TOTOLINK records in CISA KEV

No TOTOLINK vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X5000r Firmware 70 records HIGH A3300r Firmware 64 records HIGH A3002r Firmware 61 records HIGH X6000r Firmware 57 records HIGH A3002ru Firmware 49 records HIGH A3100r Firmware 47 records HIGH X2000r Firmware 45 records HIGH A3700r Firmware 43 records CRITICAL

Records

21 records in N350rt Firmware · all components

TI-2025-32380 CVE-2025-51630 · GHSA-hjq6-jrvq-m64c

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a buffer overflow via…

HIGH 82

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00511 Published 2025-07-17 No fix listed CWE-120

TI-2024-28695 CVE-2024-42966 · GHSA-p332-vhv3-xv9m

Incorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to…

HIGH 82

Incorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.s…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00604 Published 2024-08-15 No fix listed CWE-863

TI-2023-06603 CVE-2023-7219 · GHSA-r29q-cjqw-pv7v

Totolink N350RT cstecgi.cgi loginAuth stack-based overflow

HIGH 76

A vulnerability has been found in Totolink N350RT 9.3.5u.6139_B202012 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01303 Published 2024-01-09 No fix listed CWE-121

TI-2024-06916 CVE-2024-7462 · GHSA-qpv4-m9c2-rf7q

TOTOLINK N350RT cstecgi.cgi setWizardCfg buffer overflow

HIGH 73

A vulnerability classified as critical has been found in TOTOLINK N350RT 9.3.5u.6139_B20201216.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01349 Published 2024-08-05 No fix listed CWE-120

TI-2024-06794 CVE-2024-7333 · GHSA-hjrp-8hpj-3p5p

TOTOLINK N350RT cstecgi.cgi setParentalRules buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK N350RT 9.3.5u.6139_B20201216.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0124 Published 2024-08-01 No fix listed CWE-120

TI-2023-06598 CVE-2023-7213 · GHSA-8c3q-7745-hrhp

Totolink N350RT HTTP POST Request main stack-based overflow

HIGH 71

A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6139_B20201216.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00903 Published 2024-01-07 No fix listed CWE-121

TI-2023-06602 CVE-2023-7218 · GHSA-pcwc-j2m8-3j5j

Totolink N350RT cstecgi.cgi loginAuth stack-based overflow

HIGH 65

A vulnerability, which was classified as critical, was found in Totolink N350RT 9.3.5u.6139_B202012.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01274 Published 2024-01-08 No fix listed CWE-121

TI-2023-06599 CVE-2023-7214 · GHSA-cpjv-h35c-937x

Totolink N350RT HTTP POST Request main stack-based overflow

MEDIUM 40

A vulnerability, which was classified as critical, has been found in Totolink N350RT 9.3.5u.6139_B20201216.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00903 Published 2024-01-07 No fix listed CWE-121

TI-2023-06573 CVE-2023-7187 · GHSA-w6vc-3rw3-4m6g

Totolink N350RT HTTP POST Request stack-based overflow

LOW 39

A vulnerability was found in Totolink N350RT 9.3.5u.6139_B20201216.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00709 Published 2023-12-31 No fix listed CWE-121

TI-2022-16809 CVE-2022-36487 · GHSA-5f8x-jf84-584g

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection…

LOW 36

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01022 Published 2022-08-25 No fix listed CWE-78

TI-2022-16808 CVE-2022-36486 · GHSA-r433-rhx3-j94v

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection…

LOW 36

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01022 Published 2022-08-25 No fix listed CWE-78

TI-2022-16807 CVE-2022-36485 · GHSA-wwhh-w44f-8x5c

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection…

LOW 36

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01022 Published 2022-08-25 No fix listed CWE-78

TI-2022-16804 CVE-2022-36482 · GHSA-5wgj-p5q3-4x96

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection…

LOW 36

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00878 Published 2022-08-25 No fix listed CWE-787

TI-2022-16803 CVE-2022-36481 · GHSA-9xfr-g3rq-8fp4

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection…

LOW 36

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01216 Published 2022-08-25 No fix listed CWE-78

TI-2022-16801 CVE-2022-36479 · GHSA-75w5-mj4m-g8r4

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection…

LOW 36

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01022 Published 2022-08-25 No fix listed CWE-78

TI-2024-00528 CVE-2024-0570 · GHSA-6wh7-wg3p-86m2

Totolink N350RT Setting cstecgi.cgi access control

LOW 34

A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00795 Published 2024-01-16 No fix listed CWE-284

TI-2022-16810 CVE-2022-36488 · GHSA-v4jv-gfgq-2wrh

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the…

LOW 34

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00346 Published 2022-08-25 No fix listed CWE-787

TI-2022-16806 CVE-2022-36484 · GHSA-f4j3-6hhj-67c6

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg.

LOW 34

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00346 Published 2022-08-25 No fix listed CWE-787

TI-2022-16805 CVE-2022-36483 · GHSA-px6r-m42q-v846

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter.

LOW 34

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00346 Published 2022-08-25 No fix listed CWE-787

TI-2022-16802 CVE-2022-36480 · GHSA-h235-7gfj-q45r

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the…

LOW 34

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00346 Published 2022-08-25 No fix listed CWE-787

TI-2024-00869 CVE-2024-0943 · GHSA-9mx7-g5mq-8w76

Totolink N350RT cstecgi.cgi session expiration

LOW 25

A vulnerability was found in Totolink N350RT 9.3.5u.6255.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00591 Published 2024-01-26 No fix listed CWE-613

Open these records in search →