N600R Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:n600r_firmware:4.3.0cu.7866_b20220506:*:*:*:*:*:*:*
part: o version: 4.3.0cu.7866_b20220506 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | N600R Firmware (280bbd33-8545-5714-a59c-b3de5a1f2536) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9935 |
vulnerable | 2026-06-08 07:47:10.305834 |
TOTOLINK N600R cstecgi.cgi sub_4159F8 command injection
HIGH (7.3)
A vulnerability was determined in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function sub_4159F8 of the file /web_cste/cgi-bin/cstecgi.cgi. Executing manipulation can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-09-03T23:02:09.840Z
Updated: 2025-09-04T14:38:03.901Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60336 |
vulnerable | 2026-06-08 07:37:26.876640 |
Details available
A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
Published: 2025-10-22T00:00:00.000Z
Updated: 2025-10-23T16:26:39.193Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60335 |
vulnerable | 2026-06-08 07:37:26.876169 |
Details available
A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
Published: 2025-10-22T00:00:00.000Z
Updated: 2025-10-23T14:35:36.611Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60334 |
vulnerable | 2026-06-08 07:37:26.875643 |
Details available
TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Published: 2025-10-22T00:00:00.000Z
Updated: 2025-10-23T14:35:44.237Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60333 |
vulnerable | 2026-06-08 07:37:26.874145 |
Details available
TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Published: 2025-10-22T00:00:00.000Z
Updated: 2025-10-23T14:35:51.424Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.