Login Request a demo
N3
Product
N300RT
by Totolink · last CVE Apr 28, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 2High 6Medium 5Low 0
Severity
All severities13Critical2High6Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add N300RT to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-25499
8.8
4%
Dec 9
TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'
Affected: before 3.4.0-b20201026.2033
CVE-2019-19824
8.8
25%
Jan 27
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI…
Affected: through 3.4.0
CVE-2019-19823
7.5
6%
Jan 27
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file
Affected: through 3.4.0
CVE-2019-19822
7.5
9%
Jan 27
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data…
Affected: through 3.4.0
CVE-2026-7219
7.2
1%
Apr 28
Totolink N300RT formIpQoS buffer overflow
Affected: 3.4.0-B20250430
CVE-2026-7218
7.2
0%
Apr 28
Totolink N300RT libapmib.so formWsc is_cmd_string_valid buffer overflow
Affected: 3.4.0-B20250430
Showing 6