Read the docs
TI-2023-02613 Aliases CVE-2023-2790GHSA-f83j-6rqj-vhpw

TOTOLINK N200RE Telnet Service custom.conf password in configuration file

Priority LOW 25CWE-260Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A vulnerability classified as problematic has been found in TOTOLINK N200RE 9.3.5u.6255_B20211224. Affected is an unknown function of the file /squashfs-root/etc_ro/custom.conf of the component Telnet Service. The manipulation leads to password in configuration file. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-229374 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Why it matters now

EPSS 0.00276 20th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
TOTOLINKN200RE9.3.5u.6255_B20211224—No fix listedCNA
  • N200RE VendorTOTOLINK Affected 9.3.5u.6255_B20211224 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:totolink:n200re_firmware:9.3.5u.6255_b20211224:*:*:*:*:*:*:*9.3.5u.6255_b20211224VulnerableTOTOLINK
cpe:2.3:h:totolink:n200re:-:*:*:*:*:*:*:*not specified by NVDRunning onTOTOLINK
  • cpe:2.3:o:totolink:n200re_firmware:9.3.5u.6255_b20211224:*:*:*:*:*:*:* Versions 9.3.5u.6255_b20211224 Vulnerable ·TOTOLINK
  • cpe:2.3:h:totolink:n200re:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TOTOLINK

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-2790
  2. 2026-10-03 Alias added: GHSA-f83j-6rqj-vhpw

References

Exploit 1

  • TI-2024-00271 Totolink N200RE cstecgi.cgi NTPSyncWithHost os command injection CVSS 3.1CRITICAL 9.8
  • TI-2024-00274 Totolink N200RE cstecgi.cgi setTracerouteCfg os command injection CVSS 3.1CRITICAL 9.8
  • TI-2024-00273 Totolink N200RE cstecgi.cgi setDiagnosisCfg os command injection CVSS 3.1CRITICAL 9.8
  • TI-2024-00272 Totolink N200RE cstecgi.cgi UploadFirmwareFile os command injection CVSS 3.1CRITICAL 9.8
  • TI-2024-00926 Totolink N200RE cstecgi.cgi setLanguageCfg stack-based overflow CVSS 3.1HIGH 8.8
  • TI-2024-00925 Totolink N200RE cstecgi.cgi setIpPortFilterRules stack-based overflow CVSS 3.1HIGH 8.8
See all 20 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences