CVE-2024-0570: Totolink n350rt Firmware

Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. It is recommended to upgrade the affected component. VDB-250786 is the identifier assigned to this vulnerability.

Affected products

• Totolink n350rt Firmware: version 9.3.5u.6265 only

Published 2024-01-16. Last modified 2026-06-17.