totolink lr350 firmware

Name: totolink lr350 firmware
Brand: totolink

productUS

cpe:2.3:o:totolink:lr350_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

11critical9high0medium0low

updated 2026-10-28

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-10654US	critical9.1	1.55% (75th)	Exploit	no fix	2024-11-01	= 9.3.5u.6369_b20220309
CVE-2024-35387US	—	6.07% (93rd)	—	no fix	2024-05-24	= 9.3.5u.6369_b20220309
CVE-2024-7214US	high8.8	3.15% (88th)	—	no fix	2024-07-30	= 9.3.5u.6369_b20220309
CVE-2026-1149US	high8.8	3.04% (87th)	—	no fix	2026-01-19	= 9.3.5u.6369_b20220309
CVE-2026-1150US	high8.8	2.64% (86th)	—	no fix	2026-01-19	= 9.3.5u.6369_b20220309
CVE-2022-44258US	high8.8	2.45% (84th)	—	no fix	2022-11-23	= 9.3.5u.6369_b20220309
CVE-2022-44255US	critical9.8	2.28% (83rd)	—	no fix	2022-11-23	= 9.3.5u.6369_b20220309
CVE-2022-44260US	high8.8	2.21% (83rd)	—	no fix	2022-11-23	= 9.3.5u.6369_b20220309
CVE-2022-44259US	high8.8	2.21% (83rd)	—	no fix	2022-11-23	= 9.3.5u.6369_b20220309
CVE-2022-44257US	high8.8	2.21% (83rd)	—	no fix	2022-11-23	= 9.3.5u.6369_b20220309
CVE-2022-44254US	high8.8	2.21% (83rd)	—	no fix	2022-11-23	= 9.3.5u.6369_b20220309
CVE-2022-44253US	high8.8	2.21% (83rd)	—	no fix	2022-11-23	= 9.3.5u.6369_b20220309
CVE-2023-37149US	critical9.8	1.96% (80th)	—	no fix	2023-07-07	= 9.3.5u.6369_b20220309
CVE-2023-37148US	critical9.8	1.96% (80th)	—	no fix	2023-07-07	= 9.3.5u.6369_b20220309
CVE-2023-37146US	critical9.8	1.96% (80th)	—	no fix	2023-07-07	= 9.3.5u.6369_b20220309
CVE-2023-37145US	critical9.8	1.96% (80th)	—	no fix	2023-07-07	= 9.3.5u.6369_b20220309
CVE-2022-44252US	critical9.8	1.82% (79th)	—	no fix	2022-11-23	= 9.3.5u.6369_b20220309
CVE-2022-44251US	critical9.8	1.82% (79th)	—	no fix	2022-11-23	= 9.3.5u.6369_b20220309
CVE-2022-44250US	critical9.8	1.82% (79th)	—	no fix	2022-11-23	= 9.3.5u.6369_b20220309
CVE-2022-44249US	critical9.8	1.82% (79th)	—	no fix	2022-11-23	= 9.3.5u.6369_b20220309
CVE-2024-36783US	—	1.39% (72nd)	—	no fix	2024-06-03	= 9.3.5u.6369_b20220309
CVE-2026-1157US	—	1.01% (63rd)	—	no fix	2026-01-19	= 9.3.5u.6369_b20220309
CVE-2026-1155US	—	0.94% (61st)	—	no fix	2026-01-19	= 9.3.5u.6369_b20220309
CVE-2024-35099US	—	0.84% (58th)	—	no fix	2024-05-14	= 9.3.5u.6698_b20230810
CVE-2026-1158US	—	0.74% (54th)	—	no fix	2026-01-19	= 9.3.5u.6369_b20220309
CVE-2026-1156US	—	0.74% (54th)	—	no fix	2026-01-19	= 9.3.5u.6369_b20220309
CVE-2026-4976US	—	0.67% (52nd)	—	no fix	2026-03-27	= 9.3.5u.6369_b20220309
CVE-2024-42967US	critical9.8	0.60% (49th)	—	no fix	2024-08-15	= 9.3.5u.6369_b20220309
CVE-2024-34308US	—	0.56% (46th)	—	no fix	2024-05-14	= 9.3.5u.6369_b20220309
CVE-2025-63465US	—	0.41% (35th)	—	no fix	2025-10-31	= 9.3.5u.6369_b20220309
CVE-2025-63464US	—	0.41% (35th)	—	no fix	2025-10-31	= 9.3.5u.6369_b20220309
CVE-2025-63463US	—	0.41% (35th)	—	no fix	2025-10-31	= 9.3.5u.6369_b20220309
CVE-2025-63469US	—	0.41% (35th)	—	no fix	2025-10-31	= 9.3.5u.6369_b20220309
CVE-2025-63468US	—	0.41% (35th)	—	no fix	2025-10-31	= 9.3.5u.6369_b20220309
CVE-2025-63467US	—	0.41% (35th)	—	no fix	2025-10-31	= 9.3.5u.6369_b20220309
CVE-2025-63466US	—	0.41% (35th)	—	no fix	2025-10-31	= 9.3.5u.6369_b20220309

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-121Stack-based Buffer Overflow9 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')8 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')7 CVEs
CWE-787Out-of-bounds Write7 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer5 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE36 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan