Advisories · Technology
TOTOLINK N600R.
Every CVE that names TOTOLINK N600R among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
TOTOLINK N600R Authentication cstecgi.cgi loginAuth random values
- TOTOLINK N600R
- Weak cryptography or TLS
- CWE-310
- CVSS 6.9 Medium
TOTOLINK N600R cstecgi.cgi getCurrentTime command injection
- TOTOLINK N600R
- Other injection
- Command injection
- CVSS 10.0 CriticalCritical · CVSS 9+
TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow
- TOTOLINK N600R
- Memory corruption
- CVSS 8.7 High
TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow
- TOTOLINK N600R
- Memory corruption
- CVSS 6.9 Medium
TOTOLINK N600R cstecgi.cgi sub_4159F8 command injection
- TOTOLINK N600R
- Other injection
- Command injection
- CVSS 8.6 High
TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation
- TOTOLINK N600R
- TOTOLINK X2000R
- Privilege escalation
- CWE-272
- CVSS 8.7 High
TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow
- TOTOLINK T10
- TOTOLINK A3100R
- Memory corruption