Vulnerabilidades do Totolink N300rh Firmware
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Totolink N300rh Firmware: 2 registro(s), com versões afetadas e correções.cpe:2.3:o:totolink:n300rh_firmware
CVE-2026-3696
Crítica · 9.8
CWE-78 07/03/2026
Totolink N300RH CGI cstecgi.cgi setWiFiWpsConfig os command injection
A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used.
CVE-2026-3301
Crítica · 9.8
CWE-78 27/02/2026
Totolink N300RH Web Management cstecgi.cgi setWebWlanIdx os command injection
A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument webWlanIdx results in os command injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.