Vulnerabilities > Totolink > N200Re Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2024-01-29 CVE-2024-1003 Unspecified vulnerability in Totolink N200Re Firmware 9.3.5U.6139B20201216
A vulnerability, which was classified as critical, has been found in Totolink N200RE 9.3.5u.6139_B20201216.
network
low complexity
totolink
8.8
2024-01-29 CVE-2024-1004 Unspecified vulnerability in Totolink N200Re Firmware 9.3.5U.6139B20201216
A vulnerability, which was classified as critical, was found in Totolink N200RE 9.3.5u.6139_B20201216.
network
low complexity
totolink
7.2
2024-01-29 CVE-2024-1000 Out-of-bounds Write vulnerability in Totolink N200Re Firmware 9.3.5U.6139B20201216
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
network
low complexity
totolink CWE-787
8.8
2024-01-29 CVE-2024-1002 Unspecified vulnerability in Totolink N200Re Firmware 9.3.5U.6139B20201216
A vulnerability classified as critical was found in Totolink N200RE 9.3.5u.6139_B20201216.
network
low complexity
totolink
8.8
2024-01-29 CVE-2024-0997 Unspecified vulnerability in Totolink N200Re Firmware 9.3.5U.6139B20201216
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical.
network
low complexity
totolink
8.8
2024-01-29 CVE-2024-0998 Unspecified vulnerability in Totolink N200Re Firmware 9.3.5U.6139B20201216
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
network
low complexity
totolink
8.8
2024-01-29 CVE-2024-0999 Unspecified vulnerability in Totolink N200Re Firmware 9.3.5U.6139B20201216
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
network
low complexity
totolink
8.8
2020-01-27 CVE-2019-19824 OS Command Injection vulnerability in Totolink products
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available.
network
low complexity
totolink CWE-78
8.8
2020-01-27 CVE-2019-19823 Insufficiently Protected Credentials vulnerability in multiple products
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file.
7.5
2020-01-27 CVE-2019-19822 Missing Authentication for Critical Function vulnerability in multiple products
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords).
7.5