Totolink

N300rh Firmware

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2026-3696

Exploit
  • EPSS 1.97%
  • Veröffentlicht 08.03.2026 00:32:14
  • Zuletzt bearbeitet 10.03.2026 18:57:26

A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection. The att...

9.8

CVE-2026-3301

Exploit
  • EPSS 0.91%
  • Veröffentlicht 27.02.2026 05:32:15
  • Zuletzt bearbeitet 27.02.2026 15:36:49

A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argu...

5.1

CVE-2025-6401

Exploit
  • EPSS 0.12%
  • Veröffentlicht 21.06.2025 06:31:08
  • Zuletzt bearbeitet 25.06.2025 20:14:01

A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. It has been classified as problematic. This affects an unknown part of the file /boafrm/formFilter of the component HTTP POST Message Handler. The manipulation of the argument url lead...

9

CVE-2025-6400

Exploit
  • EPSS 0.6%
  • Veröffentlicht 21.06.2025 05:31:08
  • Zuletzt bearbeitet 25.06.2025 20:13:52

A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formPortFw of the component HTTP POST Message Handler. The manipulation of the argum...

9.8

CVE-2025-4851

  • EPSS 2.41%
  • Veröffentlicht 18.05.2025 03:31:05
  • Zuletzt bearbeitet 24.05.2025 01:03:29

A vulnerability classified as critical was found in TOTOLINK N300RH 6.1c.1390_B20191101. This vulnerability affects the function setUploadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to command injection....

6.3

CVE-2025-4850

  • EPSS 1.39%
  • Veröffentlicht 18.05.2025 03:00:09
  • Zuletzt bearbeitet 24.05.2025 00:57:35

A vulnerability classified as critical has been found in TOTOLINK N300RH 6.1c.1390_B20191101. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument plugin_name leads to command injection. It is...

9.8

CVE-2025-4849

  • EPSS 2.41%
  • Veröffentlicht 18.05.2025 02:31:07
  • Zuletzt bearbeitet 24.05.2025 00:55:22

A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. It has been rated as critical. Affected by this issue is the function CloudACMunualUpdateUserdata of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument url leads to comman...