totolink n600r firmware

Name: totolink n600r firmware
Brand: totolink

productUS

cpe:2.3:o:totolink:n600r_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

26critical1high0medium0low

updated 2026-10-28

vulnerabilities (38)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-28906US	critical9.8	2.87% (87th)	Exploit	no fix	2022-05-10	= 5.3c.7159_b20190425
CVE-2022-26187US	critical9.8	19.6% (97th)	—	no fix	2022-03-22	= 4.3.0cu.7570_b20200620
CVE-2022-26186US	critical9.8	3.95% (90th)	—	no fix	2022-03-22	= 4.3.0cu.7570_b20200620
CVE-2022-26189US	critical9.8	3.42% (89th)	—	no fix	2022-03-22	= 4.3.0cu.7570_b20200620
CVE-2022-26188US	critical9.8	3.42% (89th)	—	no fix	2022-03-22	= 4.3.0cu.7570_b20200620
CVE-2025-9935US	critical9.8	2.73% (86th)	—	no fix	2025-09-04	= 4.3.0cu.7866_b20220506
CVE-2022-28913US	critical9.8	2.54% (85th)	—	no fix	2022-05-10	= 5.3c.7159_b20190425
CVE-2022-28912US	critical9.8	2.54% (85th)	—	no fix	2022-05-10	= 5.3c.7159_b20190425
CVE-2022-28911US	critical9.8	2.54% (85th)	—	no fix	2022-05-10	= 5.3c.7159_b20190425
CVE-2022-28910US	critical9.8	2.54% (85th)	—	no fix	2022-05-10	= 5.3c.7159_b20190425
CVE-2022-28909US	critical9.8	2.54% (85th)	—	no fix	2022-05-10	= 5.3c.7159_b20190425
CVE-2022-28908US	critical9.8	2.54% (85th)	—	no fix	2022-05-10	= 5.3c.7159_b20190425
CVE-2022-28907US	critical9.8	2.54% (85th)	—	no fix	2022-05-10	= 5.3c.7159_b20190425
CVE-2022-28905US	critical9.8	2.54% (85th)	—	no fix	2022-05-10	= 5.3c.7159_b20190425
CVE-2022-27411US	critical9.8	2.50% (85th)	—	no fix	2022-05-05	= 5.3c.5507_b20171031
CVE-2025-60335US	—	2.13% (82nd)	—	no fix	2025-10-22	= 4.3.0cu.7866_b20220506
CVE-2025-51390US	—	1.79% (78th)	—	no fix	2025-08-04	= 4.3.0cu.7647_b20210106
CVE-2025-60336US	—	1.77% (78th)	—	no fix	2025-10-22	= 4.3.0cu.7866_b20220506
CVE-2022-29399US	critical9.8	1.76% (78th)	—	no fix	2022-05-10	= 4.3.0cu.7647_b20210106
CVE-2022-29398US	critical9.8	1.76% (78th)	—	no fix	2022-05-10	= 4.3.0cu.7647_b20210106
CVE-2022-29397US	critical9.8	1.69% (77th)	—	no fix	2022-05-10	= 4.3.0cu.7647_b20210106
CVE-2022-29396US	critical9.8	1.69% (77th)	—	no fix	2022-05-10	= 4.3.0cu.7647_b20210106
CVE-2022-29395US	critical9.8	1.69% (77th)	—	no fix	2022-05-10	= 4.3.0cu.7647_b20210106
CVE-2022-29394US	critical9.8	1.69% (77th)	—	no fix	2022-05-10	= 4.3.0cu.7647_b20210106
CVE-2022-29393US	critical9.8	1.69% (77th)	—	no fix	2022-05-10	= 4.3.0cu.7647_b20210106
CVE-2022-29392US	critical9.8	1.69% (77th)	—	no fix	2022-05-10	= 4.3.0cu.7647_b20210106
CVE-2022-29391US	critical9.8	1.69% (77th)	—	no fix	2022-05-10	= 4.3.0cu.7647_b20210106
CVE-2025-4496US	critical9.8	1.23% (69th)	—	no fix	2025-05-10	= 4.1.8cu.5241_b20210927
CVE-2025-8181US	—	1.12% (66th)	—	no fix	2025-07-26	= 4.3.0
CVE-2025-11444US	—	1.06% (65th)	—	no fix	2025-10-08	≤ 4.3.0cu.7866_b2022506
CVE-2025-46060US	—	0.97% (62nd)	—	no fix	2025-06-13	= 4.3.0cu.7866_b2022506
CVE-2023-43141US	critical9.8	0.79% (56th)	—	no fix	2023-09-25	= 4.3.0cu.7647_b20210106
CVE-2025-60334US	—	0.59% (48th)	—	no fix	2025-10-22	= 4.3.0cu.7866_b20220506
CVE-2025-22900US	—	0.56% (47th)	—	no fix	2025-04-15	= 4.3.0cu.7647_b20210106
CVE-2025-60333US	—	0.49% (42nd)	—	no fix	2025-10-22	= 4.3.0cu.7866_b20220506
CVE-2025-57623US	—	0.39% (32nd)	—	no fix	2025-09-25	= 4.3.0cu.7866_b2022506
CVE-2022-36613US	high7.8OT elevated	0.30% (22nd)	—	no fix	2022-08-29	= 4.3.0cu.7647_b20210106
CVE-2025-22903US	—	0.22% (13th)	—	no fix	2025-04-15	= 4.3.0cu.7647_b20210106

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')11 CVEs
CWE-787Out-of-bounds Write9 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')5 CVEs
CWE-121Stack-based Buffer Overflow4 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE38 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan