Vulnerabilidades do Totolink N600r Firmware
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Totolink N600r Firmware: 5 registro(s), com versões afetadas e correções.cpe:2.3:o:totolink:n600r_firmware
CVE-2025-60336
Alta · 7.5
CWE-476 22/10/2025
NULL Pointer Dereference em Totolink N600r Firmware
A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVE-2025-60335
Alta · 7.5
CWE-476 22/10/2025
NULL Pointer Dereference em Totolink N600r Firmware
A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVE-2025-60334
Alta · 7.5
CWE-121 22/10/2025
Stack-based Buffer Overflow em Totolink N600r Firmware
TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-60333
Alta · 7.5
CWE-121 22/10/2025
Stack-based Buffer Overflow em Totolink N600r Firmware
TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-11444
Alta · 8.8
CWE-119 08/10/2025
TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow
A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.