Vulnerabilities > Totolink > High

DATE CVE VULNERABILITY TITLE RISK
2024-01-29 CVE-2024-0997 Stack-based Buffer Overflow vulnerability in Totolink N200Re Firmware 9.3.5U.6139B20201216
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical.
network
low complexity
totolink CWE-121
8.8
2024-01-29 CVE-2024-0998 Stack-based Buffer Overflow vulnerability in Totolink N200Re Firmware 9.3.5U.6139B20201216
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
network
low complexity
totolink CWE-121
8.8
2024-01-29 CVE-2024-0999 Stack-based Buffer Overflow vulnerability in Totolink N200Re Firmware 9.3.5U.6139B20201216
A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216.
network
low complexity
totolink CWE-121
8.8
2024-01-08 CVE-2023-7218 Stack-based Buffer Overflow vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
A vulnerability, which was classified as critical, was found in Totolink N350RT 9.3.5u.6139_B202012.
network
low complexity
totolink CWE-121
7.2
2024-01-08 CVE-2024-0291 Command Injection vulnerability in Totolink Lr1200Gb Firmware 9.1.0U.6619B20230130
A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130.
network
low complexity
totolink CWE-77
8.8
2024-01-07 CVE-2023-7214 Out-of-bounds Write vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
A vulnerability, which was classified as critical, has been found in Totolink N350RT 9.3.5u.6139_B20201216.
network
low complexity
totolink CWE-787
8.8
2024-01-07 CVE-2023-7213 Out-of-bounds Write vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6139_B20201216.
network
low complexity
totolink CWE-787
8.8
2023-12-31 CVE-2023-7187 Stack-based Buffer Overflow vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
A vulnerability was found in Totolink N350RT 9.3.5u.6139_B20201216.
low complexity
totolink CWE-121
8.8
2023-12-06 CVE-2023-48859 Incorrect Authorization vulnerability in Totolink A3002Ru Firmware 2.0.0B20190902.1958
TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows attackers to bypass front-end security restrictions and execute arbitrary code.
network
low complexity
totolink CWE-863
8.8
2023-11-20 CVE-2023-48192 Code Injection vulnerability in Totolink A3700R Firmware 9.1.2U.6134B20201202
An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function.
local
low complexity
totolink CWE-94
7.8