Priority HIGH 82
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00511 · Published 2025-07-17 · No fix listed CWE-120
Priority HIGH 82
Incorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.s…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00604 · Published 2024-08-15 · No fix listed CWE-863
Priority HIGH 73
A vulnerability classified as critical has been found in TOTOLINK N350RT 9.3.5u.6139_B20201216.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01349 · Published 2024-08-05 · No fix listed CWE-120
Priority HIGH 73
A vulnerability was found in TOTOLINK N350RT 9.3.5u.6139_B20201216.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.0124 · Published 2024-08-01 · No fix listed CWE-120
Priority LOW 25
A vulnerability was found in Totolink N350RT 9.3.5u.6255.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00591 · Published 2024-01-26 · No fix listed CWE-613
Priority LOW 34
A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00795 · Published 2024-01-16 · No fix listed CWE-284
Priority HIGH 76
A vulnerability has been found in Totolink N350RT 9.3.5u.6139_B202012 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01303 · Published 2024-01-09 · No fix listed CWE-121
Priority HIGH 65
A vulnerability, which was classified as critical, was found in Totolink N350RT 9.3.5u.6139_B202012.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01274 · Published 2024-01-08 · No fix listed CWE-121
Priority MEDIUM 40
A vulnerability, which was classified as critical, has been found in Totolink N350RT 9.3.5u.6139_B20201216.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00903 · Published 2024-01-07 · No fix listed CWE-121
Priority HIGH 71
A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6139_B20201216.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00903 · Published 2024-01-07 · No fix listed CWE-121
Priority LOW 39
A vulnerability was found in Totolink N350RT 9.3.5u.6139_B20201216.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00709 · Published 2023-12-31 · No fix listed CWE-121
Priority LOW 34
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00346 · Published 2022-08-25 · No fix listed CWE-787
Priority LOW 36
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01022 · Published 2022-08-25 · No fix listed CWE-78
Priority LOW 36
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01022 · Published 2022-08-25 · No fix listed CWE-78
Priority LOW 36
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01022 · Published 2022-08-25 · No fix listed CWE-78
Priority LOW 34
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00346 · Published 2022-08-25 · No fix listed CWE-787
Priority LOW 34
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00346 · Published 2022-08-25 · No fix listed CWE-787
Priority LOW 36
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00878 · Published 2022-08-25 · No fix listed CWE-787
Priority LOW 36
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01216 · Published 2022-08-25 · No fix listed CWE-78
Priority LOW 34
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00346 · Published 2022-08-25 · No fix listed CWE-787
Priority LOW 36
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01022 · Published 2022-08-25 · No fix listed CWE-78
THREATIST.IORead the docs