Login Request a demo
LR
Product
LR350
by TOTOLINK · last CVE Nov 1, 2024
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 6High 1Medium 0Low 0
Severity
All severities7Critical6High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add LR350 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-35387
9.8
6%
May 24
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth
Affected: 9.3.5u.6369_b20220309
CVE-2023-37146
9.8
2%
Jul 7
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function
Affected: V9.3.5u.6369_B20220309
CVE-2023-37148
9.8
2%
Jul 7
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the ussd parameter in the setUssd function
Affected: v9.3.5u.6369_b20220309
CVE-2023-37145
9.8
2%
Jul 7
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function
Affected: V9.3.5u.6369_B20220309
CVE-2023-37149
9.8
2%
Jul 7
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function
Affected: v9.3.5u.6369_b20220309
CVE-2024-10654
9.1
2%
Nov 1
TOTOLINK LR350 formLoginAuth.htm authorization
Affected: 9.3.5u.6369
CVE-2024-7214
8.8
3%
Jul 30
TOTOLINK LR350 cstecgi.cgi setWanCfg command injection
Affected: 9.3.5u.6369_B20220309
Showing 7