Lr350 (Totolink) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2024-11-01. Vendor: Totolink.

CVEs of Lr350

• CVE-2024-10654 - CVSS 9.1 (critical), 2024-11-01: A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical. Affected by this vulnerability is an unknown functionality of…
• CVE-2024-7214 - CVSS 8.8 (high), 2024-07-30: A vulnerability has been found in TOTOLINK LR350 9.3.5u.6369_B20220309 and classified as critical. Affected by this vulnerability is the function setWanCfg of…
• CVE-2024-35387 - CVSS 9.8 (critical), 2024-05-24: TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.
• CVE-2023-37145 - CVSS 9.8 (critical), 2023-07-07: TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function.
• CVE-2023-37149 - CVSS 9.8 (critical), 2023-07-07: TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function.
• CVE-2023-37148 - CVSS 9.8 (critical), 2023-07-07: TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the ussd parameter in the setUssd function.
• CVE-2023-37146 - CVSS 9.8 (critical), 2023-07-07: TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.