N100re Firmware (Totolink) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2022-05-02. Vendor: Totolink.

CVEs of N100re Firmware

• CVE-2020-23617 - CVSS 6.1 (medium), 2022-05-02: A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers to execute arbitrary web scripts or…
• CVE-2019-19822 - CVSS 7.5 (high), 2020-01-27: A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration,…
• CVE-2019-19824 - CVSS 8.8 (high), 2020-01-27: On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd…
• CVE-2019-19823 - CVSS 7.5 (high), 2020-01-27: A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory…
• CVE-2019-19825 - CVSS 9.8 (critical), 2020-01-27: On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI,…