N302r Firmware (Totolink) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2020-01-27. Vendor: Totolink.

CVEs of N302r Firmware

• CVE-2019-19823 - CVSS 7.5 (high), 2020-01-27: A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory…
• CVE-2019-19822 - CVSS 7.5 (high), 2020-01-27: A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration,…
• CVE-2019-19824 - CVSS 8.8 (high), 2020-01-27: On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd…
• CVE-2019-19825 - CVSS 9.8 (critical), 2020-01-27: On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI,…