CVE-2022-48113: Totolink n200re-v5 Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet service via a crafted POST request. Attackers are also able to leverage this vulnerability to login as root via hardcoded credentials.

Affected products

• Totolink n200re-v5 Firmware: version 9.3.5u.6139 only

Published 2023-02-02. Last modified 2026-06-17.