Totolink N300Rh V3 vulnerabilities

3 vulnerabilities

Known vulnerabilities in Totolink N300Rh V3, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2015-9550totolinka850r-v1_firmware+7
EPSS score
1.55%
An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices. By sending a specific hel,xasf packet to the WAN interface, it is possible to open the web management interface on the WAN interface.10CVE-2015-9551totolinka850r-v1_firmware+7
EPSS score
4.40%
An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices. There is Remote Code Execution in the management interface via the formSysCmd sysCmd parameter.9CVE-2020-25499totolinka3002r_firmware+12
EPSS score
4.20%
TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router.