Approved changes feed: RSS · Atom

cpe:2.3:a:totolink:n350r:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductN350R (60bde9df-5907-59a0-8688-2fabaed9781e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8938 vulnerable 2026-06-08 07:45:21.476481 TOTOLINK N350R Telnet Service formSysTel backdoor
MEDIUM (6.3)
A vulnerability was found in TOTOLINK N350R 1.2.3-B20130826. This issue affects the function formSysTel of the file /boafrm/formSysTel of the component Telnet Service. The manipulation of the argument TelEnabled leads to backdoor. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-14T05:02:09.169Z
Updated: 2025-08-15T12:58:21.913Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8937 vulnerable 2026-06-08 07:45:21.474596 TOTOLINK N350R formSysCmd command injection
MEDIUM (6.3)
A vulnerability has been found in TOTOLINK N350R 1.2.3-B20130826. This vulnerability affects unknown code of the file /boafrm/formSysCmd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-14T04:32:11.130Z
Updated: 2025-08-15T21:35:41.077Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.