Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

totolink / n100re CVEs

Beta · best-effort

5 CVEs tagged to totolink / n100re — 1 Critical, 3 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to totolink vendor archive

CVE-2020-23617

Published May 2, 2022

A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers to execute arbitrary web scripts or HTML via SCRIPT element.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-19824

Published Jan 27, 2020

On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (…

CVSS 8.8 · High

evidence mentions: 2
Buzz score: 17.5

Vendor/product tagsBeta · best-effort

CVE-2019-19823

Published Jan 27, 2020

A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file. This aff…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2019-19822

Published Jan 27, 2020

A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2019-19825

Published Jan 27, 2020

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA byp…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1