Totolink

N300rh Firmware

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.1

CVE-2025-6401

Exploit
  • EPSS 0.11%
  • Published 21.06.2025 06:31:08
  • Last modified 25.06.2025 20:14:01

A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. It has been classified as problematic. This affects an unknown part of the file /boafrm/formFilter of the component HTTP POST Message Handler. The manipulation of the argument url lead...

9

CVE-2025-6400

Exploit
  • EPSS 0.19%
  • Published 21.06.2025 05:31:08
  • Last modified 25.06.2025 20:13:52

A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formPortFw of the component HTTP POST Message Handler. The manipulation of the argum...

9.8

CVE-2025-4851

  • EPSS 1.05%
  • Published 18.05.2025 03:31:05
  • Last modified 24.05.2025 01:03:29

A vulnerability classified as critical was found in TOTOLINK N300RH 6.1c.1390_B20191101. This vulnerability affects the function setUploadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to command injection....

6.3

CVE-2025-4850

  • EPSS 2.58%
  • Published 18.05.2025 03:00:09
  • Last modified 24.05.2025 00:57:35

A vulnerability classified as critical has been found in TOTOLINK N300RH 6.1c.1390_B20191101. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument plugin_name leads to command injection. It is...

9.8

CVE-2025-4849

  • EPSS 1.05%
  • Published 18.05.2025 02:31:07
  • Last modified 24.05.2025 00:55:22

A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. It has been rated as critical. Affected by this issue is the function CloudACMunualUpdateUserdata of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument url leads to comman...