Totolink

N300rh Firmware

15 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2026-10187

Exploit
  • EPSS 1.43%
  • Veröffentlicht 31.05.2026 14:15:14
  • Zuletzt bearbeitet 01.06.2026 15:15:37

A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument KeyStr results...

10

CVE-2026-9543

Exploit
  • EPSS 2.13%
  • Veröffentlicht 26.05.2026 12:30:11
  • Zuletzt bearbeitet 26.05.2026 19:37:00

A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument admpass leads to os command i...

8.8

CVE-2026-7750

Exploit
  • EPSS 0.46%
  • Veröffentlicht 04.05.2026 09:00:17
  • Zuletzt bearbeitet 04.05.2026 15:17:58

A vulnerability was detected in Totolink N300RH 3.2.4-B20220812. This vulnerability affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument mac_address results in...

8.8

CVE-2026-7749

Exploit
  • EPSS 0.56%
  • Veröffentlicht 04.05.2026 08:45:11
  • Zuletzt bearbeitet 04.05.2026 15:17:58

A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument priDns leads to buffer over...

8.8

CVE-2026-7748

Exploit
  • EPSS 0.46%
  • Veröffentlicht 04.05.2026 08:30:14
  • Zuletzt bearbeitet 04.05.2026 15:17:58

A weakness has been identified in Totolink N300RH 3.2.4-B20220812. Affected by this issue is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Executing a manipulation of the argument FileName can lead ...

9.8

CVE-2026-7747

Exploit
  • EPSS 0.61%
  • Veröffentlicht 04.05.2026 08:15:14
  • Zuletzt bearbeitet 04.05.2026 15:17:58

A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. Performing a manipulation of the argument Password r...

6.5

CVE-2026-7633

Exploit
  • EPSS 0.33%
  • Veröffentlicht 02.05.2026 14:00:15
  • Zuletzt bearbeitet 05.05.2026 19:15:06

A vulnerability was identified in Totolink N300RH 6.1c.1353_B20190305. This impacts the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument FileName leads to file inclusion. The attack may be performed from r...

7.3

CVE-2026-6158

Exploit
  • EPSS 1.41%
  • Veröffentlicht 13.04.2026 04:00:19
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A flaw has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setUpgradeUboot of the file upgrade.so. This manipulation of the argument FileName causes os command injection. The attack is possible to be carried out remotely. ...

9.8

CVE-2026-3696

Exploit
  • EPSS 1.92%
  • Veröffentlicht 08.03.2026 00:32:14
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection. The att...

9.8

CVE-2026-3301

Exploit
  • EPSS 4.03%
  • Veröffentlicht 27.02.2026 05:32:15
  • Zuletzt bearbeitet 27.02.2026 15:36:49

A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argu...