TOTOLINK N200RE Firmware 9.3.5u.6139_B20201216
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:n200re_firmware:9.3.5u.6139_b20201216:*:*:*:*:*:*:*
part: o version: 9.3.5u.6139_b20201216 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | N200Re Firmware (596ade43-bb4b-5037-9fba-5b9bd1745e93) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-7154 |
vulnerable | 2026-06-08 07:43:18.067599 |
TOTOLINK N200RE cstecgi.cgi sub_41A0F8 os command injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B20201216. Affected by this issue is the function sub_41A0F8 of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Hostname leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-08T00:32:07.691Z
Updated: 2025-07-08T16:14:52.767Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1004 |
vulnerable | 2026-06-08 06:25:38.976355 |
Totolink N200RE cstecgi.cgi loginAuth stack-based overflow
HIGH (7.2)
A vulnerability, which was classified as critical, was found in Totolink N200RE 9.3.5u.6139_B20201216. This affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252273 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-29T15:00:07.267Z
Updated: 2025-06-17T21:29:17.449Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1003 |
vulnerable | 2026-06-08 06:25:38.975709 |
Totolink N200RE cstecgi.cgi setLanguageCfg stack-based overflow
HIGH (7.2)
A vulnerability, which was classified as critical, has been found in Totolink N200RE 9.3.5u.6139_B20201216. Affected by this issue is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument lang leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252272. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-29T14:31:03.812Z
Updated: 2025-06-17T21:29:17.310Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1002 |
vulnerable | 2026-06-08 06:25:38.975011 |
Totolink N200RE cstecgi.cgi setIpPortFilterRules stack-based overflow
HIGH (7.2)
A vulnerability classified as critical was found in Totolink N200RE 9.3.5u.6139_B20201216. Affected by this vulnerability is the function setIpPortFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ePort leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252271. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-29T14:00:06.271Z
Updated: 2025-05-29T15:09:58.391Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1001 |
vulnerable | 2026-06-08 06:25:38.974304 |
Totolink N200RE cstecgi.cgi main stack-based overflow
HIGH (7.2)
A vulnerability classified as critical has been found in Totolink N200RE 9.3.5u.6139_B20201216. Affected is the function main of the file /cgi-bin/cstecgi.cgi. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-252270 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-29T13:31:04.977Z
Updated: 2025-06-16T18:29:04.067Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1000 |
vulnerable | 2026-06-08 06:25:38.973479 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0999 |
vulnerable | 2026-06-08 06:22:03.316710 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0998 |
vulnerable | 2026-06-08 06:22:03.313634 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0997 |
vulnerable | 2026-06-08 06:22:03.310584 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0299 |
vulnerable | 2026-06-08 06:22:00.262233 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0298 |
vulnerable | 2026-06-08 06:22:00.261730 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0297 |
vulnerable | 2026-06-08 06:22:00.261038 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0296 |
vulnerable | 2026-06-08 06:22:00.259109 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.