N200re-v5 Firmware vulnerabilities

3 known vulnerabilities in N200re-v5 Firmware from TOTOLINK. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  n200re_v5_firmware: Improper Access Control

  CVE-2022-46025Jan 10, 2024TOTOLINKEPSS 1.13%

  Totolink N200RE_V5 V9.3.5u.6255_B20211224 is vulnerable to Incorrect Access Control. The device allows remote attackers to obtain Wi-Fi system information, such as Wi-Fi SSID and Wi-Fi password, without logging into the management page.

• 8.8 High severity

  N200RE V5: Use of Externally-Controlled Format String

  CVE-2023-4746Sep 4, 2023TOTOLINKEPSS 3.71%

  A vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437_B20230519. This affects the function Validity_check. The manipulation leads to format string. It is possible to initiate the attack remotely. The root-cause of the vulnerab

• 9.8 Critical severity

  N200re-v5 Firmware: Use of Hard-coded Credentials

  CVE-2022-48113Feb 2, 2023TOTOLINK

  A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet service via a crafted POST request. Attackers are also able to leverage this vulnerability to login as root via hardcoded credentials.