GCVE - cpe:2.3:h:totolink:n150rt:2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:totolink:n150rt:2.0:*:*:*:*:*:*:*

part: h version: 2.0 update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	N150Rt (`1f5dd530-9664-5187-960b-3660d68d7a8d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-3995`	not_vulnerable	2026-06-08 07:23:10.274508	TOTOLINK N150RT LAN Settings Page fromStaticDHCP cross site scripting LOW (2.4) A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /boafrm/fromStaticDHCP of the component LAN Settings Page. The manipulation of the argument Hostname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-04-28T01:31:06.269Z Updated: 2025-04-28T18:43:43.267Z Open on db.gcve.eu Reference links https://vuldb.com/?id.306331 https://vuldb.com/?ctiid.306331 https://vuldb.com/?submit.557946 https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/XSS_LAN_settings https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-3994`	not_vulnerable	2026-06-08 07:23:10.273729	TOTOLINK N150RT IP Port Filtering home.htm cross site scripting LOW (2.4) A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been classified as problematic. Affected is an unknown function of the file /home.htm of the component IP Port Filtering. The manipulation of the argument Comment leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-04-28T01:00:08.215Z Updated: 2025-04-28T14:26:32.659Z Open on db.gcve.eu Reference links https://vuldb.com/?id.306330 https://vuldb.com/?ctiid.306330 https://vuldb.com/?submit.557945 https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/XSS_IP_Port_filering https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-3993`	not_vulnerable	2026-06-08 07:23:10.273247	TOTOLINK N150RT formWsc buffer overflow HIGH (8.8) A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-04-28T00:31:07.513Z Updated: 2025-04-28T14:27:29.701Z Open on db.gcve.eu Reference links https://vuldb.com/?id.306329 https://vuldb.com/?ctiid.306329 https://vuldb.com/?submit.557944 https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/BufferOverflow_formWsc_1 https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-3992`	not_vulnerable	2026-06-08 07:23:10.272659	TOTOLINK N150RT formWlwds buffer overflow HIGH (8.8) A vulnerability has been found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWlwds. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-04-28T00:00:06.959Z Updated: 2025-04-28T14:28:42.335Z Open on db.gcve.eu Reference links https://vuldb.com/?id.306328 https://vuldb.com/?ctiid.306328 https://vuldb.com/?submit.557943 https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/BufferOverflow_formWlwds https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-3991`	not_vulnerable	2026-06-08 07:23:10.272161	TOTOLINK N150RT formWdsEncrypt buffer overflow HIGH (8.8) A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boafrm/formWdsEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-04-27T23:31:05.914Z Updated: 2025-04-28T15:29:28.712Z Open on db.gcve.eu Reference links https://vuldb.com/?id.306327 https://vuldb.com/?ctiid.306327 https://vuldb.com/?submit.557942 https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/BufferOverflow_formWdsEncrypt https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-3990`	not_vulnerable	2026-06-08 07:23:10.271611	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-3989`	not_vulnerable	2026-06-08 07:23:10.271215	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-3988`	not_vulnerable	2026-06-08 07:23:10.270715	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-3987`	not_vulnerable	2026-06-08 07:23:10.269988	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.