Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:lr350_firmware:9.3.5u.6369_b20220309:*:*:*:*:*:*:*

part: o version: 9.3.5u.6369_b20220309 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductLr350 Firmware (5beab749-114f-5b5b-b8ad-e0403a30bd00)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4976 vulnerable 2026-06-08 08:07:02.741550 Totolink LR350 cstecgi.cgi setWiFiGuestCfg buffer overflow
HIGH (8.8)
A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWiFiGuestCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Published: 2026-03-27T20:29:56.502Z
Updated: 2026-03-30T14:54:04.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1158 vulnerable 2026-06-08 07:47:14.402115 Totolink LR350 POST Request cstecgi.cgi setWizardCfg buffer overflow
HIGH (8.8)
A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-01-19T14:32:08.100Z
Updated: 2026-02-23T08:46:49.974Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1157 vulnerable 2026-06-08 07:47:14.401630 Totolink LR350 cstecgi.cgi setWiFiEasyCfg buffer overflow
HIGH (8.8)
A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This affects the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ssid leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Published: 2026-01-19T14:02:10.111Z
Updated: 2026-02-23T08:46:34.104Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1156 vulnerable 2026-06-08 07:47:14.397937 Totolink LR350 cstecgi.cgi setWiFiBasicCfg buffer overflow
HIGH (8.8)
A vulnerability was determined in Totolink LR350 9.3.5u.6369_B20220309. Affected by this issue is the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ssid causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-01-19T13:32:11.182Z
Updated: 2026-02-23T08:46:20.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1155 vulnerable 2026-06-08 07:47:14.397578 Totolink LR350 cstecgi.cgi setWiFiEasyGuestCfg buffer overflow
HIGH (8.8)
A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. Affected by this vulnerability is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid results in buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.
Published: 2026-01-19T13:02:15.880Z
Updated: 2026-02-23T08:46:05.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1150 vulnerable 2026-06-08 07:47:14.391948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1149 vulnerable 2026-06-08 07:47:14.390164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63469 vulnerable 2026-06-08 07:39:17.626175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63468 vulnerable 2026-06-08 07:39:17.625785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63467 vulnerable 2026-06-08 07:39:17.625518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63466 vulnerable 2026-06-08 07:39:17.624998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63465 vulnerable 2026-06-08 07:39:17.624619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63464 vulnerable 2026-06-08 07:39:17.624198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63463 vulnerable 2026-06-08 07:39:17.622755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7214 vulnerable 2026-06-08 06:58:21.539161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42967 vulnerable 2026-06-08 06:45:47.166102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36783 vulnerable 2026-06-08 06:39:45.658037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35387 vulnerable 2026-06-08 06:39:41.912821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34308 vulnerable 2026-06-08 06:37:33.110286 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10654 vulnerable 2026-06-08 06:23:47.200748 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37149 vulnerable 2026-06-08 06:08:14.823718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37148 vulnerable 2026-06-08 06:08:14.823291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37146 vulnerable 2026-06-08 06:08:14.822835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37145 vulnerable 2026-06-08 06:08:14.822142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44260 vulnerable 2026-06-08 05:49:35.363449 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44259 vulnerable 2026-06-08 05:49:35.362972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44258 vulnerable 2026-06-08 05:49:35.362620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44257 vulnerable 2026-06-08 05:49:35.362240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44255 vulnerable 2026-06-08 05:49:35.357827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44254 vulnerable 2026-06-08 05:49:35.357376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44253 vulnerable 2026-06-08 05:49:35.356924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44252 vulnerable 2026-06-08 05:49:35.356168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44251 vulnerable 2026-06-08 05:49:35.355702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44250 vulnerable 2026-06-08 05:49:35.355218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44249 vulnerable 2026-06-08 05:49:35.353959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.