Login Request a demo
N6
Product
N600R
by TOTOLINK · last CVE Aug 30, 2026
41
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities41In the news0Timeline
Severity mix
Critical 30High 8Medium 2Low 1
Severity
All severities41Critical30High8Medium2Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add N600R to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-11444
8.8
1%
Oct 8
TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow
Affected: 4.3.0cu.7866_B20220506
CVE-2026-79912
8.3
2%
Aug 25
TOTOLINK N600R cstecgi.cgi getCurrentTime command injection
Affected: 4.3.0cu.7647_B20210106
CVE-2022-36613
7.8
0%
Aug 29
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample
Affected: 4.3.0cu.7647_b20210106
CVE-2025-60333
7.5
0%
Oct 22
TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function
Affected: 4.3.0cu.7866_b20220506
CVE-2025-60334
7.5
1%
Oct 22
TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function
Affected: 4.3.0cu.7866_b20220506
CVE-2025-60335
7.5
2%
Oct 22
A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request
Affected: 4.3.0cu.7866_b20220506
CVE-2025-60336
7.5
2%
Oct 22
A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request
Affected: 4.3.0cu.7866_b20220506
CVE-2025-8181
7.2
1%
Jul 26
TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation
Affected: 4.3.0
Showing 8