LR
Product
LR350
by Totolink · last CVE Mar 27, 2026
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 14High 22Medium 0Low 0
Watch

Add LR350 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-4976
8.8
1%
Mar 27
Totolink LR350 cstecgi.cgi setWiFiGuestCfg buffer overflow
Affected: 9.3.5u.6369_B20220309
CVE-2026-1158
8.8
1%
Jan 19
Totolink LR350 POST Request cstecgi.cgi setWizardCfg buffer overflow
Affected: 9.3.5u.6369_B20220309
CVE-2026-1157
8.8
1%
Jan 19
Totolink LR350 cstecgi.cgi setWiFiEasyCfg buffer overflow
Affected: 9.3.5u.6369_B20220309
CVE-2026-1156
8.8
1%
Jan 19
Totolink LR350 cstecgi.cgi setWiFiBasicCfg buffer overflow
Affected: 9.3.5u.6369_B20220309
CVE-2026-1155
8.8
1%
Jan 19
Totolink LR350 cstecgi.cgi setWiFiEasyGuestCfg buffer overflow
Affected: 9.3.5u.6369_B20220309
CVE-2026-1150
8.8
3%
Jan 19
Totolink LR350 POST Request cstecgi.cgi setTracerouteCfg command injection
Affected: 9.3.5u.6369_B20220309
CVE-2026-1149
8.8
3%
Jan 19
Totolink LR350 POST Request cstecgi.cgi setDiagnosisCfg command injection
Affected: 9.3.5u.6369_B20220309
CVE-2024-7214
8.8
3%
Jul 30
A vulnerability has been found in TOTOLINK LR350 9.3.5u.6369_B20220309 and classified as critical
Affected: 9.3.5u.6369_b20220309
CVE-2024-34308
8.8
1%
May 14
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the function urldecode
Affected: 9.3.5u.6369_b20220309
CVE-2022-44260
8.8
2%
Nov 23
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter sPort/ePort in the setIpPortFilterRules function
Affected: 9.3.5u.6369_b20220309
CVE-2022-44259
8.8
2%
Nov 23
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParentalRules function
Affected: 9.3.5u.6369_b20220309
CVE-2022-44258
8.8
2%
Nov 23
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function
Affected: 9.3.5u.6369_b20220309
CVE-2022-44257
8.8
2%
Nov 23
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter pppoeUser in the setOpModeCfg function
Affected: 9.3.5u.6369_b20220309
CVE-2022-44254
8.8
2%
Nov 23
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter text in the setSmsCfg function
Affected: 9.3.5u.6369_b20220309
CVE-2022-44253
8.8
2%
Nov 23
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function
Affected: 9.3.5u.6369_b20220309
CVE-2025-63467
7.5
0%
Oct 31
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_425400 function
Affected: 9.3.5u.6369_b20220309
CVE-2025-63468
7.5
0%
Oct 31
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the sub_426EF8 function
Affected: 9.3.5u.6369_b20220309
CVE-2025-63466
7.5
0%
Oct 31
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the sub_426EF8 function
Affected: 9.3.5u.6369_b20220309
CVE-2025-63469
7.5
0%
Oct 31
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_421BAC function
Affected: 9.3.5u.6369_b20220309
CVE-2025-63463
7.5
0%
Oct 31
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub_4232EC function
Affected: 9.3.5u.6369_b20220309
CVE-2025-63464
7.5
0%
Oct 31
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_42396C function
Affected: 9.3.5u.6369_b20220309
CVE-2025-63465
7.5
0%
Oct 31
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_422880 function
Affected: 9.3.5u.6369_b20220309
Showing 22