Login Request a demo
NF
Product
N301rt Firmware
by Totolink · last CVE Jan 27, 2020
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 3Medium 0Low 0
Severity
All severities4Critical1High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add N301rt Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-19825
9.8
30%
Jan 27
On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA…
Affected: through 2.1.6
CVE-2019-19824
8.8
25%
Jan 27
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI…
Affected: through 2.1.6
CVE-2019-19823
7.5
6%
Jan 27
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file
Affected: through 2.1.6
CVE-2019-19822
7.5
9%
Jan 27
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data…
Affected: through 2.1.6
Showing 4