GCVE - cpe:2.3:o:totolink:n300rh_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:n300rh_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	N300Rh Firmware (`5071d732-0646-5c96-859a-b0f91f8e973c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-9543`	vulnerable	2026-06-08 08:08:59.027485	Totolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injection CRITICAL (9.8) A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument admpass leads to os command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Published: 2026-05-26T12:30:11.976Z Updated: 2026-05-26T15:20:50.234Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/365607 https://vuldb.com/vuln/365607/cti https://vuldb.com/submit/815068 https://github.com/A1ester/TOTOLINK-N300RH-Command-Injection https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-7750`	vulnerable	2026-06-08 08:08:57.642393	Totolink N300RH POST Request cstecgi.cgi setMacFilterRules buffer overflow HIGH (8.8) A vulnerability was detected in Totolink N300RH 3.2.4-B20220812. This vulnerability affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument mac_address results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used. Published: 2026-05-04T09:00:17.932Z Updated: 2026-05-05T18:06:12.761Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/360925 https://vuldb.com/vuln/360925/cti https://vuldb.com/submit/807204 https://lavender-bicycle-a5a.notion.site/TOTOLINK-N300RH-setMacFilterRules-34553a41781f809cb952cdcb71ce90d8 https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-7749`	vulnerable	2026-06-08 08:08:57.642109	Totolink N300RH POST Request cstecgi.cgi setWanConfig buffer overflow HIGH (8.8) A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument priDns leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Published: 2026-05-04T08:45:11.639Z Updated: 2026-05-05T00:59:31.608Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/360924 https://vuldb.com/vuln/360924/cti https://vuldb.com/submit/807203 https://lavender-bicycle-a5a.notion.site/TOTOLINK-N300RH-setWanConfig-34553a41781f80ed8500d9b8d54074f2 https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-7748`	vulnerable	2026-06-08 08:08:57.641738	Totolink N300RH POST Request cstecgi.cgi setUpgradeFW buffer overflow HIGH (8.8) A weakness has been identified in Totolink N300RH 3.2.4-B20220812. Affected by this issue is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Executing a manipulation of the argument FileName can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. Published: 2026-05-04T08:30:14.631Z Updated: 2026-05-04T10:32:32.518Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/360923 https://vuldb.com/vuln/360923/cti https://vuldb.com/submit/807202 https://lavender-bicycle-a5a.notion.site/TOTOLINK-N300RH-setUpgradeFW-34553a41781f80abb1d1c627d7ff4329?pvs=73 https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-7747`	vulnerable	2026-06-08 08:08:57.641424	Totolink N300RH Parameter cstecgi.cgi loginauth buffer overflow CRITICAL (9.8) A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. Performing a manipulation of the argument Password results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. Published: 2026-05-04T08:15:14.596Z Updated: 2026-05-04T12:43:29.421Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/360922 https://vuldb.com/vuln/360922/cti https://vuldb.com/submit/807201 https://lavender-bicycle-a5a.notion.site/TOTOLINK-N300RH-loginauth_password-34553a41781f80c0ad36f4d95122fd40?pvs=73 https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-7633`	vulnerable	2026-06-08 08:08:57.499855	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-6158`	vulnerable	2026-06-08 08:07:04.509745	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-3696`	vulnerable	2026-06-08 08:01:19.193987	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-3301`	vulnerable	2026-06-08 08:01:18.356841	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-10187`	vulnerable	2026-06-08 07:47:13.676826	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.