CVE Intelligence

Totolink N600R vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Totolink N600R: 4 record(s), with affected versions and fixes.

CVE-2026-82555 Low · 3.7 CWE-310 Aug 30, 2026
TOTOLINK N600R Authentication cstecgi.cgi loginAuth random values
A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function loginAuth of the file /web_cste/cgi-bin/cstecgi.cgi of the component Authentication Handler. Such manipulation leads to insufficiently random values. It is possible to launch the attack remotely. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit has been disclosed to the public and may be used.
CVE-2026-79912 High · 8.3 CWE-74 Aug 25, 2026
TOTOLINK N600R cstecgi.cgi getCurrentTime command injection
A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument ntp_server results in command injection. The attack can be initiated remotely. The exploit is now public and may be used.
CVE-2026-79911 Critical · 10.0 CWE-119 Aug 25, 2026
TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow
A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-11444 High · 8.8 CWE-119 Oct 8, 2025
TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow
A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.