Totolink

N600r Firmware

41 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.7

CVE-2026-82555

Exploit
  • EPSS 0.43%
  • Veröffentlicht 30.08.2026 17:30:10
  • Zuletzt bearbeitet 31.08.2026 22:17:25

A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function loginAuth of the file /web_cste/cgi-bin/cstecgi.cgi of the component Authentication Handler. Such manipulation leads to insufficiently ra...

8.3

CVE-2026-79912

Exploit
  • EPSS 1.4%
  • Veröffentlicht 25.08.2026 22:30:12
  • Zuletzt bearbeitet 26.08.2026 16:19:05

A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument ntp_server results in command injection. The attack...

10

CVE-2026-79911

Exploit
  • EPSS 0.64%
  • Veröffentlicht 25.08.2026 22:15:13
  • Zuletzt bearbeitet 27.08.2026 17:20:49

A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads ...

7.5

CVE-2025-60336

Exploit
  • EPSS 1.65%
  • Veröffentlicht 22.10.2025 00:00:00
  • Zuletzt bearbeitet 24.10.2025 14:20:06

A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

7.5

CVE-2025-60335

Exploit
  • EPSS 1.99%
  • Veröffentlicht 22.10.2025 00:00:00
  • Zuletzt bearbeitet 24.10.2025 13:18:55

A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

7.5

CVE-2025-60334

Exploit
  • EPSS 0.55%
  • Veröffentlicht 22.10.2025 00:00:00
  • Zuletzt bearbeitet 24.10.2025 13:19:02

TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

7.5

CVE-2025-60333

Exploit
  • EPSS 0.46%
  • Veröffentlicht 22.10.2025 00:00:00
  • Zuletzt bearbeitet 24.10.2025 13:19:12

TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

9

CVE-2025-11444

Exploit
  • EPSS 0.96%
  • Veröffentlicht 08.10.2025 08:02:10
  • Zuletzt bearbeitet 08.10.2026 13:10:00

A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey l...

5.3

CVE-2025-57623

Exploit
  • EPSS 0.36%
  • Veröffentlicht 25.09.2025 18:15:43
  • Zuletzt bearbeitet 29.09.2025 13:07:01

A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866_B2022506 allows attackers to cause a Denial of Service.

9.8

CVE-2025-9935

Exploit
  • EPSS 3.02%
  • Veröffentlicht 03.09.2025 23:02:09
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was determined in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function sub_4159F8 of the file /web_cste/cgi-bin/cstecgi.cgi. Executing manipulation can lead to command injection. The attack can be executed re...