VendorsTOTOLINKn600r_firmware5.3c.7159_b20190425
Vulnerabilities

TOTOLINK N600R Firmware 5.3c.7159_b20190425

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2022-28906
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg.
Published 2022-05-10 · Modified
10.0EPSS 0.029
CVE-2022-28905
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName.
Published 2022-05-10 · Modified
10.0EPSS 0.026
CVE-2022-28907
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the hosttime function in /setting/NTPSyncWithHost.
Published 2022-05-10 · Modified
10.0EPSS 0.026
CVE-2022-28908
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the ipdoamin parameter in /setting/setDiagnosisCfg.
Published 2022-05-10 · Modified
10.0EPSS 0.026
CVE-2022-28909
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx.
Published 2022-05-10 · Modified
10.0EPSS 0.026
CVE-2022-28910
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the devicename parameter in /setting/setDeviceName.
Published 2022-05-10 · Modified
10.0EPSS 0.026
CVE-2022-28911
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/CloudACMunualUpdate.
Published 2022-05-10 · Modified
10.0EPSS 0.026
CVE-2022-28912
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUpgradeFW.
Published 2022-05-10 · Modified
10.0EPSS 0.026
CVE-2022-28913
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUploadSetting.
Published 2022-05-10 · Modified
10.0EPSS 0.026