GCVE - cpe:2.3:h:totolink:n200re:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:totolink:n200re:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	N200Re (`e37494c8-23fe-5a8b-862e-ccc59e650d73`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-7154`	not_vulnerable	2026-06-08 07:43:18.066763	TOTOLINK N200RE cstecgi.cgi sub_41A0F8 os command injection MEDIUM (6.3) A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B20201216. Affected by this issue is the function sub_41A0F8 of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Hostname leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-07-08T00:32:07.691Z Updated: 2025-07-08T16:14:52.767Z Open on db.gcve.eu Reference links https://vuldb.com/?id.315092 https://vuldb.com/?ctiid.315092 https://vuldb.com/?submit.606230 https://github.com/FLY200503/IoT-vul/blob/master/Totolink/N200RE/README.md https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-55895`	not_vulnerable	2026-06-08 07:33:15.390596	Details available TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Attackers can send payloads to the interface without logging in (remote). Published: 2025-12-15T00:00:00.000Z Updated: 2025-12-16T14:36:18.097Z Open on db.gcve.eu Reference links https://www.totolink.net/ https://github.com/l0tk3/CVES/blob/main/CVE-2025-55895.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-55893`	not_vulnerable	2026-06-08 07:33:15.382338	Details available TOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via hostName. Published: 2025-12-15T00:00:00.000Z Updated: 2025-12-15T18:04:56.104Z Open on db.gcve.eu Reference links https://www.totolink.net/ https://github.com/l0tk3/CVES/blob/main/CVE-2025-55893.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1004`	not_vulnerable	2026-06-08 06:25:38.976377	Totolink N200RE cstecgi.cgi loginAuth stack-based overflow HIGH (7.2) A vulnerability, which was classified as critical, was found in Totolink N200RE 9.3.5u.6139_B20201216. This affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252273 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-01-29T15:00:07.267Z Updated: 2025-06-17T21:29:17.449Z Open on db.gcve.eu Reference links https://vuldb.com/?id.252273 https://vuldb.com/?ctiid.252273 https://jylsec.notion.site/TOTOLINK-N200RE-has-stack-buffer-overflow-vulnerability-in-loginAuth-cbde48da404049328cb698394b6c0641?pvs=4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1003`	not_vulnerable	2026-06-08 06:25:38.975733	Totolink N200RE cstecgi.cgi setLanguageCfg stack-based overflow HIGH (7.2) A vulnerability, which was classified as critical, has been found in Totolink N200RE 9.3.5u.6139_B20201216. Affected by this issue is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument lang leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252272. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-01-29T14:31:03.812Z Updated: 2025-06-17T21:29:17.310Z Open on db.gcve.eu Reference links https://vuldb.com/?id.252272 https://vuldb.com/?ctiid.252272 https://jylsec.notion.site/TOTOLINK-N200RE-has-stack-buffer-overflow-vulnerability-in-setLanguageCfg-72357294db1e4f8096b29d3f2592d1fc?pvs=4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1002`	not_vulnerable	2026-06-08 06:25:38.975039	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1001`	not_vulnerable	2026-06-08 06:25:38.974334	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1000`	not_vulnerable	2026-06-08 06:25:38.973625	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1000`	vulnerable	2026-06-08 06:25:38.971344	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0999`	not_vulnerable	2026-06-08 06:22:03.316744	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0998`	not_vulnerable	2026-06-08 06:22:03.313749	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0997`	not_vulnerable	2026-06-08 06:22:03.310846	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0299`	not_vulnerable	2026-06-08 06:22:00.262258	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0298`	not_vulnerable	2026-06-08 06:22:00.261753	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0297`	not_vulnerable	2026-06-08 06:22:00.261201	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0296`	not_vulnerable	2026-06-08 06:22:00.260446	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2790`	not_vulnerable	2026-06-08 06:02:43.011029	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-23617`	not_vulnerable	2026-06-08 05:22:32.003439	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19825`	not_vulnerable	2026-06-08 05:13:23.825997	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19824`	not_vulnerable	2026-06-08 05:13:23.824562	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19823`	not_vulnerable	2026-06-08 05:13:23.813704	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19822`	not_vulnerable	2026-06-08 05:13:23.794158	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

TOTOLINK N200RE

PURL mappings

Vulnerability references

Contribute