Note:
This project will be discontinued after December 13, 2021. [more]
Product:
N350rt_firmware
(Totolink)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 20 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2022-08-25 | CVE-2022-36479 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost. | N350rt_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36481 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg. | N350rt_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36482 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg. | N350rt_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36485 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg. | N350rt_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36486 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile. | N350rt_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36487 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg. | N350rt_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36480 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg. | N350rt_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36483 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter. | N350rt_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36484 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg. | N350rt_firmware | 7.8 | ||
| 2022-08-25 | CVE-2022-36488 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules. | N350rt_firmware | 7.8 |