Approved changes feed: RSS · Atom
cpe:2.3:a:totolink:n600r:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | N600R (9d258141-24f1-59cd-9fe1-9147ce85e6b6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9935 |
vulnerable | 2026-06-08 07:47:10.304902 |
TOTOLINK N600R cstecgi.cgi sub_4159F8 command injection
HIGH (7.3)
A vulnerability was determined in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function sub_4159F8 of the file /web_cste/cgi-bin/cstecgi.cgi. Executing manipulation can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-09-03T23:02:09.840Z
Updated: 2025-09-04T14:38:03.901Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8181 |
vulnerable | 2026-06-08 07:45:19.771573 |
TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation
HIGH (7.2)
A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1. This affects an unknown part of the file vsftpd.conf of the component FTP Service. The manipulation leads to least privilege violation. It is possible to initiate the attack remotely.
Published: 2025-07-26T07:02:07.845Z
Updated: 2025-07-28T15:05:51.551Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4496 |
vulnerable | 2026-06-08 07:29:16.326306 |
TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-10T05:00:10.763Z
Updated: 2025-05-12T19:30:55.738Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.