TI-2026-04388 CVE-2026-5030 · GHSA-8fgh-55xj-7pjm
Totolink NR1800X Telnet Service cstecgi.cgi NTPSyncWithHost command injection
Priority MEDIUM 57
A vulnerability has been found in Totolink NR1800X 9.1.0u.6279_B20210910.
Vulnerabilities
27 records
TI-2026-01040 CVE-2026-1328 · GHSA-m9xx-p5qf-6jvp
Totolink NR1800X POST Request cstecgi.cgi setWizardCfg buffer overflow
Priority HIGH 73
A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910.
TI-2026-01039 CVE-2026-1327 · GHSA-vcr6-rc5m-f5w2
Totolink NR1800X POST Request cstecgi.cgi setTracerouteCfg command injection
Priority MEDIUM 57
A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910.
TI-2026-01038 CVE-2026-1326 · GHSA-c7c4-v9c9-65gw
Totolink NR1800X POST Request cstecgi.cgi setWanCfg command injection
Priority MEDIUM 57
A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910.
TI-2025-37761 CVE-2025-60688 · GHSA-hrmj-986x-7pmm
A stack buffer overflow vulnerability exists in the ToToLink LR1200GB…
Priority MEDIUM 64
A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (setDefResponse function).
TI-2025-37759 CVE-2025-60686 · GHSA-5mqq-26vj-265q
A local stack-based buffer overflow vulnerability exists in the infostat.cgi and…
Priority MEDIUM 58
A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers (A720R V4.1.5cu.614_B20230630, LR1200GB V9.1.0u.6619_B20230130, and NR1800X V9.1.0u.6681_B20230703…
TI-2025-37757 CVE-2025-60684 · GHSA-wjgf-7c7g-5vwr
A stack buffer overflow vulnerability exists in the ToToLink LR1200GB…
Priority MEDIUM 64
A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (sub_42F32C function).
TI-2025-28867 CVE-2025-45845 · GHSA-w7v2-r8f5-7h23
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack…
Priority HIGH 73
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function.
TI-2025-28866 CVE-2025-45844 · GHSA-88m5-wrqh-4w9g
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack…
Priority HIGH 73
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function.
TI-2025-28865 CVE-2025-45843 · GHSA-4cwh-m6gc-c4p6
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack…
Priority HIGH 73
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function.
TI-2025-28864 CVE-2025-45842 · GHSA-vp89-77x6-5qqm
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack…
Priority HIGH 73
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function.
TI-2025-28863 CVE-2025-45841 · GHSA-7vx7-qjwv-wcrm
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack…
Priority MEDIUM 43
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function.
TI-2024-23411 CVE-2024-35388
TOTOLINK NR1800X v9.1.0u.6681_B20230703 was discovered to contain a stack overflow via…
Priority MEDIUM 45
TOTOLINK NR1800X v9.1.0u.6681_B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode
TI-2023-06604 CVE-2023-7220 · GHSA-p9pw-8h32-73j5
Totolink NR1800X cstecgi.cgi loginAuth stack-based overflow
Priority HIGH 75
A vulnerability was found in Totolink NR1800X 9.1.0u.6279_B20210910 and classified as critical.
TI-2023-18216 CVE-2023-36340 · GHSA-ff5g-xv9r-r383
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow via…
Priority MEDIUM 50
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.
TI-2022-21741 CVE-2022-44256 · GHSA-hff6-mhh2-fwxf
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via…
Priority MEDIUM 44
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function.
TI-2022-19940 CVE-2022-41528 · GHSA-6wv3-93hw-4r84
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack…
Priority MEDIUM 40
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function.
TI-2022-19939 CVE-2022-41527 · GHSA-w33v-52fh-v2xf
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack…
Priority MEDIUM 40
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the pppoeUser parameter in the setOpModeCfg function.
TI-2022-19938 CVE-2022-41526 · GHSA-hg64-cj58-6ffc
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack…
Priority MEDIUM 40
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the ip parameter in the setDiagnosisCfg function.
TI-2022-19937 CVE-2022-41525 · GHSA-vfvm-cc7q-px7v
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection…
Priority MEDIUM 46
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the OpModeCfg function at /cgi-bin/cstecgi.cgi.
TI-2022-19936 CVE-2022-41524 · GHSA-hq23-p823-xp34
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack…
Priority MEDIUM 40
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, and eTime parameters in the setParentalRules function.
TI-2022-19935 CVE-2022-41523 · GHSA-pcmp-wf3h-7cg7
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack…
Priority MEDIUM 40
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the command parameter in the setTracerouteCfg function.
TI-2022-19934 CVE-2022-41522 · GHSA-mc7w-6r9h-c93j
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated…
Priority MEDIUM 44
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated stack overflow via the "main" function.
TI-2022-19933 CVE-2022-41521 · GHSA-44fp-8j32-x3x6
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack…
Priority MEDIUM 40
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the sPort/ePort parameter in the setIpPortFilterRules function.
TI-2022-19932 CVE-2022-41520 · GHSA-6p6w-2c58-cv5m
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack…
Priority MEDIUM 40
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the File parameter in the UploadCustomModule function.