Totolink

N300rh Firmware

13 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-7750

Exploit
  • EPSS 0.09%
  • Veröffentlicht 04.05.2026 09:00:17
  • Zuletzt bearbeitet 04.05.2026 15:17:58

A vulnerability was detected in Totolink N300RH 3.2.4-B20220812. This vulnerability affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument mac_address results in...

8.8

CVE-2026-7749

Exploit
  • EPSS 0.09%
  • Veröffentlicht 04.05.2026 08:45:11
  • Zuletzt bearbeitet 04.05.2026 15:17:58

A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument priDns leads to buffer over...

8.8

CVE-2026-7748

Exploit
  • EPSS 0.09%
  • Veröffentlicht 04.05.2026 08:30:14
  • Zuletzt bearbeitet 04.05.2026 15:17:58

A weakness has been identified in Totolink N300RH 3.2.4-B20220812. Affected by this issue is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Executing a manipulation of the argument FileName can lead ...

9.8

CVE-2026-7747

Exploit
  • EPSS 0.1%
  • Veröffentlicht 04.05.2026 08:15:14
  • Zuletzt bearbeitet 04.05.2026 15:17:58

A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. Performing a manipulation of the argument Password r...

6.5

CVE-2026-7633

Exploit
  • EPSS 0.16%
  • Veröffentlicht 02.05.2026 14:00:15
  • Zuletzt bearbeitet 05.05.2026 19:15:06

A vulnerability was identified in Totolink N300RH 6.1c.1353_B20190305. This impacts the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument FileName leads to file inclusion. The attack may be performed from r...

7.3

CVE-2026-6158

Exploit
  • EPSS 4.74%
  • Veröffentlicht 13.04.2026 04:00:19
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A flaw has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setUpgradeUboot of the file upgrade.so. This manipulation of the argument FileName causes os command injection. The attack is possible to be carried out remotely. ...

9.8

CVE-2026-3696

Exploit
  • EPSS 0.57%
  • Veröffentlicht 08.03.2026 00:32:14
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection. The att...

9.8

CVE-2026-3301

Exploit
  • EPSS 0.94%
  • Veröffentlicht 27.02.2026 05:32:15
  • Zuletzt bearbeitet 27.02.2026 15:36:49

A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argu...

3.5

CVE-2025-6401

Exploit
  • EPSS 0.22%
  • Veröffentlicht 21.06.2025 06:31:08
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. It has been classified as problematic. This affects an unknown part of the file /boafrm/formFilter of the component HTTP POST Message Handler. The manipulation of the argument url lead...

9

CVE-2025-6400

Exploit
  • EPSS 1.36%
  • Veröffentlicht 21.06.2025 05:31:08
  • Zuletzt bearbeitet 25.06.2025 20:13:52

A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formPortFw of the component HTTP POST Message Handler. The manipulation of the argum...