Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:lr350_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductLr350 Firmware (5beab749-114f-5b5b-b8ad-e0403a30bd00)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4976 vulnerable 2026-06-08 08:07:02.740049 Totolink LR350 cstecgi.cgi setWiFiGuestCfg buffer overflow
HIGH (8.8)
A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWiFiGuestCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Published: 2026-03-27T20:29:56.502Z
Updated: 2026-03-30T14:54:04.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1158 vulnerable 2026-06-08 07:47:14.402078 Totolink LR350 POST Request cstecgi.cgi setWizardCfg buffer overflow
HIGH (8.8)
A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-01-19T14:32:08.100Z
Updated: 2026-02-23T08:46:49.974Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1157 vulnerable 2026-06-08 07:47:14.401597 Totolink LR350 cstecgi.cgi setWiFiEasyCfg buffer overflow
HIGH (8.8)
A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This affects the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ssid leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Published: 2026-01-19T14:02:10.111Z
Updated: 2026-02-23T08:46:34.104Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1156 vulnerable 2026-06-08 07:47:14.397904 Totolink LR350 cstecgi.cgi setWiFiBasicCfg buffer overflow
HIGH (8.8)
A vulnerability was determined in Totolink LR350 9.3.5u.6369_B20220309. Affected by this issue is the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ssid causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-01-19T13:32:11.182Z
Updated: 2026-02-23T08:46:20.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1155 vulnerable 2026-06-08 07:47:14.397539 Totolink LR350 cstecgi.cgi setWiFiEasyGuestCfg buffer overflow
HIGH (8.8)
A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. Affected by this vulnerability is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid results in buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.
Published: 2026-01-19T13:02:15.880Z
Updated: 2026-02-23T08:46:05.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1150 vulnerable 2026-06-08 07:47:14.391793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1149 vulnerable 2026-06-08 07:47:14.388826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.