N300Rt Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:n300rt_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | N300Rt Firmware (c95a74fc-3619-5b5a-8546-beccc474eede) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7219 |
vulnerable | 2026-06-08 08:07:05.527473 |
Totolink N300RT formIpQoS buffer overflow
HIGH (7.2)
A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS. Executing a manipulation of the argument entry_name can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.
Published: 2026-04-28T03:00:23.944Z
Updated: 2026-04-29T14:13:31.485Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7218 |
vulnerable | 2026-06-08 08:07:05.527028 |
Totolink N300RT libapmib.so formWsc is_cmd_string_valid buffer overflow
HIGH (7.2)
A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function is_cmd_string_valid of the file /boafrm/formWsc of the component libapmib.so. Performing a manipulation of the argument localPin results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published: 2026-04-28T02:45:13.239Z
Updated: 2026-04-29T14:15:09.478Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34319 |
vulnerable | 2026-06-08 07:19:02.985560 |
TOTOLINK N300RT <= V2.1.8-B20201030.1539 Boa formWsc RCE
TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 (discovered in V2.1.8-B20201030.1539) contain an OS command injection vulnerability in the Boa formWsc handling functionality. An unauthenticated attacker can send specially crafted requests to trigger command execution via the targetAPSsid request parameter.
Published: 2025-12-03T16:49:11.306Z
Updated: 2026-05-14T02:08:12.502Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51228 |
vulnerable | 2026-06-08 06:52:11.868965 |
Details available
An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1420 and TOTOLINK-CX-N300RT V2.1.8-B20171113.1408 and TOTOLINK-CX-N300RT V2.1.8-B20191010.1107 and TOTOLINK-CX-N302RE V2.0.2-B20170511.1523 allows a remote attacker to execute arbitrary code via the /boafrm/formSysCmd component.
Published: 2024-11-27T00:00:00.000Z
Updated: 2024-11-29T19:37:04.757Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25499 |
vulnerable | 2026-06-08 05:22:36.790266 |
Details available
TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router.
Published: 2020-12-09T20:30:55.000Z
Updated: 2024-08-04T15:33:05.689Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19825 |
vulnerable | 2026-06-08 05:13:23.825768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19824 |
vulnerable | 2026-06-08 05:13:23.824418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19823 |
vulnerable | 2026-06-08 05:13:23.813653 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19822 |
vulnerable | 2026-06-08 05:13:23.792403 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.