Priority MEDIUM 47
TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0034 · Published 2025-12-15 · No fix listed CWE-284
Priority MEDIUM 62
TOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via hostName.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.01105 · Published 2025-12-15 · No fix listed CWE-77
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B20201216.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.02364 · Published 2025-07-08 · No fix listed CWE-77
Priority HIGH 71
A vulnerability, which was classified as critical, was found in Totolink N200RE 9.3.5u.6139_B20201216.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01276 · Published 2024-01-29 · No fix listed CWE-121
Priority HIGH 73
A vulnerability, which was classified as critical, has been found in Totolink N200RE 9.3.5u.6139_B20201216.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0125 · Published 2024-01-29 · No fix listed CWE-121
Priority HIGH 73
A vulnerability classified as critical was found in Totolink N200RE 9.3.5u.6139_B20201216.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0125 · Published 2024-01-29 · No fix listed CWE-121
Priority MEDIUM 45
A vulnerability classified as critical has been found in Totolink N200RE 9.3.5u.6139_B20201216.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.014 · Published 2024-01-29 · No fix listed CWE-121
Priority MEDIUM 43
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0125 · Published 2024-01-29 · No fix listed CWE-121
Priority MEDIUM 43
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01485 · Published 2024-01-29 · No fix listed CWE-121
Priority HIGH 73
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.014 · Published 2024-01-29 · No fix listed CWE-121
Priority HIGH 73
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0125 · Published 2024-01-29 · No fix listed CWE-121
Priority HIGH 81
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03834 · Published 2024-01-08 · No fix listed CWE-78
Priority HIGH 81
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03834 · Published 2024-01-08 · No fix listed CWE-78
Priority HIGH 81
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03834 · Published 2024-01-08 · No fix listed CWE-78
Priority HIGH 82
A vulnerability has been found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03834 · Published 2024-01-08 · No fix listed CWE-78
Priority LOW 25
A vulnerability classified as problematic has been found in TOTOLINK N200RE 9.3.5u.6255_B20211224.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00276 · Published 2023-05-18 · No fix listed CWE-260
Priority LOW 28
A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers to execute arbitrary web scripts or HTML via SCRIPT element.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00568 · Published 2022-05-02 · No fix listed CWE-79
Priority MEDIUM 44
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.08669 · Published 2020-01-27 · No fix listed CWE-306
Priority MEDIUM 42
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.06411 · Published 2020-01-27 · No fix listed CWE-522
Priority HIGH 73
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.25135 · Published 2020-01-27 · No fix listed CWE-78
Priority HIGH 65
On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.29557 · Published 2020-01-27 · No fix listed CWE-287
THREATIST.IORead the docs