Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-05-18	CVE-2023-2790	Password in Configuration File vulnerability in Totolink N200Re Firmware 9.3.5U.6255B20211224 A vulnerability classified as problematic has been found in TOTOLINK N200RE 9.3.5u.6255_B20211224. local low complexity totolink CWE-260	5.5
2022-05-02	CVE-2020-23617	Cross-site Scripting vulnerability in Totolink N100Re Firmware and N200Re Firmware A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers to execute arbitrary web scripts or HTML via SCRIPT element. network totolink CWE-79	4.3
2020-01-27	CVE-2019-19823	Insufficiently Protected Credentials vulnerability in multiple products A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file. network low complexity totolink realtek sapido ciktel kctvjeju fg-products hiwifi tbroad coship iodata hcn-max-c300n-project CWE-522	5.0
2020-01-27	CVE-2019-19822	Missing Authentication for Critical Function vulnerability in multiple products A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords). network low complexity totolink realtek sapido ciktel kctvjeju fg-products hiwifi tbroad coship iodata hcn-max-c300n-project CWE-306	5.0