Search Results (7 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-60336 1 Totolink 2 N600r, N600r Firmware 2025-10-24 7.5 High
A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVE-2025-60333 1 Totolink 2 N600r, N600r Firmware 2025-10-24 7.5 High
TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-60334 1 Totolink 2 N600r, N600r Firmware 2025-10-24 7.5 High
TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-57623 1 Totolink 2 N600r, N600r Firmware 2025-09-29 5.3 Medium
A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866_B2022506 allows attackers to cause a Denial of Service.
CVE-2025-51390 1 Totolink 2 N600r, N600r Firmware 2025-08-15 9.8 Critical
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a command injection vulnerability via the pin parameter in the setWiFiWpsConfig function.
CVE-2025-22903 1 Totolink 2 N600r, N600r Firmware 2025-04-22 4.6 Medium
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the pin parameter in the function setWiFiWpsConfig.
CVE-2025-22900 1 Totolink 2 N600r, N600r Firmware 2025-04-22 9.8 Critical
Totolink N600R v4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function.