N300RT vulnerabilities
3 known vulnerabilities in N300RT from TOTOLINK. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
N300RT: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS. Executing a manipulation of the argument entry_name can lead to buffer overflow. The attack may be performed from remote. The exploit has
- 7.2 High severity
N300RT: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function is_cmd_string_valid of the file /boafrm/formWsc of the component libapmib.so. Performing a manipulation of the argument localPin results in buffer overflow. T
- 9.3 Critical severity
N300RT: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 (discovered in V2.1.8-B20201030.1539) contain an OS command injection vulnerability in the Boa formWsc handling functionality. An unauthenticated attacker can send specially crafted re