CveMateVulnerability intelligence

Totolink Lr350 vulnerabilities

36 vulnerabilities

Known vulnerabilities in Totolink Lr350, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2025-63463totolinklr350_firmware11mo ago31-10-2025 00:00

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub_4232EC function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-63465totolinklr350_firmware11mo ago31-10-2025 00:00

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_422880 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-63467totolinklr350_firmware11mo ago31-10-2025 00:00

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_425400 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-63464totolinklr350_firmware11mo ago31-10-2025 00:00

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_42396C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-63466totolinklr350_firmware11mo ago31-10-2025 00:00

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the sub_426EF8 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-63469totolinklr350_firmware11mo ago31-10-2025 00:00

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_421BAC function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-63468totolinklr350_firmware11mo ago31-10-2025 00:00

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the sub_426EF8 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2022-44255totolinklr350_firmware3y ago23-11-2022 00:00

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function via long post data.CVE-2022-44252totolinklr350_firmware3y ago23-11-2022 00:00

TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the setUploadSetting function.CVE-2022-44250totolinklr350_firmware3y ago23-11-2022 00:00

TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function.CVE-2022-44259totolinklr350_firmware3y ago23-11-2022 00:00

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParentalRules function.CVE-2022-44257totolinklr350_firmware3y ago23-11-2022 00:00

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter pppoeUser in the setOpModeCfg function.CVE-2022-44260totolinklr350_firmware3y ago23-11-2022 00:00

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter sPort/ePort in the setIpPortFilterRules function.CVE-2022-44254totolinklr350_firmware3y ago23-11-2022 00:00

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter text in the setSmsCfg function.CVE-2022-44249totolinklr350_firmware3y ago23-11-2022 00:00

TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the UploadFirmwareFile function.CVE-2022-44251totolinklr350_firmware3y ago23-11-2022 00:00

TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the ussd parameter in the setUssd function.CVE-2022-44258totolinklr350_firmware3y ago23-11-2022 00:00

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function.CVE-2022-44253totolinklr350_firmware3y ago23-11-2022 00:00

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function.CVE-2024-42967totolinklr350_firmware2y ago15-08-2024 00:00

Incorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh.CVE-2024-36783totolinklr350_firmware2y ago03-06-2024 19:58

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection via the host_time parameter in the NTPSyncWithHost function.