Totolink n150rt-v2 Firmware vulnerabilities

2 CVEs affecting Totolink n150rt-v2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-9551, published 2020-11-24.

More from Totolink.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-9551, published 2020-11-24. Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days. An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices. There is Remote Code Execution in the management interface via the formSysCmd…
• CVE-2015-9550, published 2020-11-24. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices. By sending a specific hel,xasf packet to the WAN interface, it is possible to…