Vulnerabilities > Totolink > N350Rt Firmware > 9.3.5u.6139.b20201216

DATE CVE VULNERABILITY TITLE RISK
2024-01-09 CVE-2023-7219 Stack-based Buffer Overflow vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
A vulnerability has been found in Totolink N350RT 9.3.5u.6139_B202012 and classified as critical.
network
low complexity
totolink CWE-121
critical
9.8
2024-01-08 CVE-2023-7218 Stack-based Buffer Overflow vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
A vulnerability, which was classified as critical, was found in Totolink N350RT 9.3.5u.6139_B202012.
network
low complexity
totolink CWE-121
7.2
2024-01-07 CVE-2023-7214 Out-of-bounds Write vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
A vulnerability, which was classified as critical, has been found in Totolink N350RT 9.3.5u.6139_B20201216.
network
low complexity
totolink CWE-787
8.8
2024-01-07 CVE-2023-7213 Out-of-bounds Write vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6139_B20201216.
network
low complexity
totolink CWE-787
8.8
2023-12-31 CVE-2023-7187 Stack-based Buffer Overflow vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
A vulnerability was found in Totolink N350RT 9.3.5u.6139_B20201216.
low complexity
totolink CWE-121
8.8
2022-08-25 CVE-2022-36479 OS Command Injection vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost.
local
low complexity
totolink CWE-78
7.8
2022-08-25 CVE-2022-36481 OS Command Injection vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg.
local
low complexity
totolink CWE-78
7.8
2022-08-25 CVE-2022-36482 Out-of-bounds Write vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg.
local
low complexity
totolink CWE-787
7.8
2022-08-25 CVE-2022-36485 OS Command Injection vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.
local
low complexity
totolink CWE-78
7.8
2022-08-25 CVE-2022-36486 OS Command Injection vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.
local
low complexity
totolink CWE-78
7.8