NF
Product
N350rt Firmware
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 15Medium 1Low 0
Watch
Add N350rt Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-51630 | 9.8 | Jul 17 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules Affected: 9.3.5u.6139_b20201216 |
| CVE-2024-42966 | 9.8 | Aug 15 | Incorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a… Affected: 9.3.5u.6139_b20201216 |
| CVE-2024-7462 | 9.8 | Aug 5 | TOTOLINK N350RT cstecgi.cgi setWizardCfg buffer overflow Affected: 9.3.5u.6139_b20201216 |
| CVE-2023-7219 | 9.8 | Jan 9 | Totolink N350RT cstecgi.cgi loginAuth stack-based overflow Affected: 9.3.5u.6139_b20201216 |
| CVE-2024-0570 | 9.1 | Jan 16 | Totolink N350RT Setting cstecgi.cgi access control Affected: 9.3.5u.6265 |
| CVE-2024-7333 | 8.8 | Aug 1 | TOTOLINK N350RT cstecgi.cgi setParentalRules buffer overflow Affected: 9.3.5u.6139_b20201216 |
| CVE-2023-7214 | 8.8 | Jan 7 | Totolink N350RT HTTP POST Request main stack-based overflow Affected: 9.3.5u.6139_b20201216 |
| CVE-2023-7213 | 8.8 | Jan 7 | Totolink N350RT HTTP POST Request main stack-based overflow Affected: 9.3.5u.6139_b20201216 |
| CVE-2023-7187 | 8.8 | Dec 31 | Totolink N350RT HTTP POST Request stack-based overflow Affected: 9.3.5u.6139_b20201216 |
| CVE-2022-36488 | 7.8 | Aug 25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules Affected: 9.3.5u.6139_b20201216 |
| CVE-2022-36487 | 7.8 | Aug 25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg Affected: 9.3.5u.6139_b20201216 |
| CVE-2022-36486 | 7.8 | Aug 25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile Affected: 9.3.5u.6139_b20201216 |
| CVE-2022-36485 | 7.8 | Aug 25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg Affected: 9.3.5u.6139_b20201216 |
| CVE-2022-36484 | 7.8 | Aug 25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg Affected: 9.3.5u.6139_b20201216 |
| CVE-2022-36483 | 7.8 | Aug 25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter Affected: 9.3.5u.6139_b20201216 |
| CVE-2022-36482 | 7.8 | Aug 25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg Affected: 9.3.5u.6139_b20201216 |
| CVE-2022-36481 | 7.8 | Aug 25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg Affected: 9.3.5u.6139_b20201216 |
| CVE-2022-36480 | 7.8 | Aug 25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg Affected: 9.3.5u.6139_b20201216 |
| CVE-2022-36479 | 7.8 | Aug 25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost Affected: 9.3.5u.6139_b20201216 |
| CVE-2023-7218 | 7.2 | Jan 8 | Totolink N350RT cstecgi.cgi loginAuth stack-based overflow Affected: 9.3.5u.6139_b20201216 |
| CVE-2024-0943 | 5.3 | Jan 26 | Totolink N350RT cstecgi.cgi session expiration Affected: 9.3.5u.6255 |
Showing 21