Command injection

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...

Stack overflow

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg...

Stack overflow

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg...

Command injection

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...

Command injection

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

Stack overflow

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules...

Stack overflow

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the pppoeUser parameter...

Command injection

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg...

Command injection

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg...

CVE-2022-36488

CVE-2022-36488 affects TOTOLINK N350RT firmware version V9.3.5u.6139_B20201216. A stack overflow is triggered in the setIpPortFilterRules function via the sPort parameter. According to the NVD entry, the CVSS v3.1 base score is 7.8 (High), with Local attack vector, Low attack complexity, Privileg...

CVE-2022-36488

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules...

CVE-2022-36487

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...

CVE-2022-36487

CVE-2022-36487 affects TOTOLINK N350RT, version 9.3.5u.6139_B20201216. A command injection is possible through the command parameter in the setTracerouteCfg() function. The CVSS v3.1 base metrics indicate a High impact with Local attack vector, Low attack complexity, and no user interaction requi...

CVE-2022-36486

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile...

CVE-2022-36485

CVE-2022-36485 affects TOTOLINK N350RT, specifically version 9.3.5u.6139_B20201216. A command-injection vulnerability exists in the hostName parameter of the setOpModeCfg function. The NVD metrics indicate a high-severity impact (CVSS 3.1: AV LOCAL, AC LOW, PR LOW, UI NONE, S U, C/H/I/A = HIGH). ...

CVE-2022-36486

CVE-2022-36486 affects TOTOLINK N350RT with firmware 9.3.5u.6139_B20201216. The flaw is a command injection via the FileName parameter in UploadFirmwareFile. According to NVD, the vulnerability is locally exploitable with low privileges, no user interaction, and impacts all three CIA metrics (hig...

CVE-2022-36485

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

CVE-2022-36484

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg...

CVE-2022-36484

TOTOLINK N350RT with firmware 9.3.5u.6139_B20201216 has a stack overflow in setDiagnosisCfg. CVSS v3.1 vector shows Local access, Low attack complexity, Low privileges, No user interaction, with High impact on confidentiality, integrity, and availability. The issue’s root cause is a stack overflo...

CVE-2022-36483

Totolink N350RT running version 9.3.5u.6139_B20201216 contains a stack overflow vulnerability in the pppoeUser parameter. The issue is described across multiple sources (PT-2022-23405, CNNVD, Red Hat/NVD entries) as a stack overflow affecting this device, with CVSS metrics indicating high impact ...