totolink n300rt firmware

Name: totolink n300rt firmware
Brand: totolink

productUS

cpe:2.3:o:totolink:n300rt_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

2critical4high0medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-19825US	critical9.8	29.6% (98th)	—	no fix	2020-01-27	≤ 3.4.0
CVE-2019-19824US	high8.8	25.1% (98th)	—	no fix	2020-01-27	≤ 3.4.0
CVE-2019-19822US	high7.5OT elevated	8.67% (95th)	—	no fix	2020-01-27	≤ 3.4.0
CVE-2019-19823US	high7.5	6.41% (94th)	—	no fix	2020-01-27	≤ 3.4.0
CVE-2020-25499US	high8.8OT elevated	4.20% (91st)	—	3.4.0-b20201026.2033	2020-12-09	< 3.4.0-b20201026.2033
CVE-2023-48860US	critical9.8	1.38% (72nd)	—	no fix	2023-12-07	= 3.2.4-b20180730.0906
CVE-2024-32333US	—	0.59% (48th)	—	no fix	2024-04-18	= 2.1.8-b20201030.1539
CVE-2024-32335US	—	0.41% (36th)	—	no fix	2024-04-18	= 2.1.8-b20201030.1539
CVE-2024-32332US	—	0.41% (36th)	—	no fix	2024-04-18	= 2.1.8-b20201030.1539
CVE-2024-32334US	—	0.40% (34th)	—	no fix	2024-04-18	= 2.1.8-b20201030.1539
CVE-2024-32327US	—	0.36% (29th)	—	no fix	2024-04-18	= 2.1.8-b20201030.1539

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-522Insufficiently Protected Credentials1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.