Totolink n200re-v5 Firmware vulnerabilities

3 CVEs affecting Totolink n200re-v5 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-0942, published 2024-01-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-4746, published 2023-09-04. High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437_B20230519. This affects the function Validity_check. The manipulation leads to format string. It is possible to…
CVE-2022-48113, published 2023-02-02. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet service via a crafted POST request. Attackers are also able to leverage this…
CVE-2024-0942, published 2024-01-26. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was found in Totolink N200RE V5 9.3.5u.6255_B20211224. It has been classified as problematic. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi. The manipulation leads…