Login Request a demo
N3
Product
N300RT
by Totolink · last CVE Apr 28, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 2High 6Medium 5Low 0
Severity
All severities13Critical2High6Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add N300RT to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-48860
9.8
1%
Dec 7
TOTOLINK N300RT version 3.2.4-B20180730.0906 has a post-authentication RCE due to incorrect access control, allows attackers can bypass front-end security restrictions and execute…
Affected: 3.2.4-b20180730.0906
CVE-2019-19825
9.8
30%
Jan 27
On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA…
Affected: through 3.4.0
CVE-2020-25499
8.8
4%
Dec 9
TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'
Affected: before 3.4.0-b20201026.2033
CVE-2019-19824
8.8
25%
Jan 27
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI…
Affected: through 3.4.0
CVE-2019-19823
7.5
6%
Jan 27
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file
Affected: through 3.4.0
CVE-2019-19822
7.5
9%
Jan 27
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data…
Affected: through 3.4.0
CVE-2026-7219
7.2
1%
Apr 28
Totolink N300RT formIpQoS buffer overflow
Affected: 3.4.0-B20250430
CVE-2026-7218
7.2
0%
Apr 28
Totolink N300RT libapmib.so formWsc is_cmd_string_valid buffer overflow
Affected: 3.4.0-B20250430
CVE-2024-32334
6.5
0%
Apr 18
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page
Affected: 2.1.8-b20201030.1539
CVE-2024-32332
6.1
0%
Apr 18
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in WDS Settings under the Wireless Page
Affected: 2.1.8-b20201030.1539
CVE-2024-32327
5.5
0%
Apr 18
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in Port Forwarding under the Firewall Page
Affected: 2.1.8-b20201030.1539
CVE-2024-32335
5.4
0%
Apr 18
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in Access Control under the Wireless Page
Affected: 2.1.8-b20201030.1539
CVE-2024-32333
4.3
1%
Apr 18
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page
Affected: 2.1.8-b20201030.1539
Showing 13