Login Request a demo
NF
Product
N100re Firmware
by Totolink · last CVE May 2, 2022
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 3Medium 1Low 0
Severity
All severities5Critical1High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add N100re Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-19825
9.8
30%
Jan 27
On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA…
Affected: through 3.4.0
CVE-2019-19824
8.8
25%
Jan 27
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI…
Affected: through 3.4.0
CVE-2019-19823
7.5
6%
Jan 27
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file
Affected: through 3.4.0
CVE-2019-19822
7.5
9%
Jan 27
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data…
Affected: through 3.4.0
CVE-2020-23617
6.1
1%
May 2
A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers to execute arbitrary web scripts or HTML via SCRIPT element
Affected: 2.0
Showing 5