N600r firmware

This hub aggregates every CVE we track for N600r firmware, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting N600r firmware.

• CVE-2025-60334TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function. This vulnerability allows attackers to cause a Denial of ...7.5Oct 22, 2025
• CVE-2025-60335A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.7.5Oct 22, 2025
• CVE-2025-60336A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.7.5Oct 22, 2025
• CVE-2025-60333TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function. This vulnerability allows attackers to cause a Deni...7.5Oct 22, 2025
• CVE-2025-11444TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow8.8Oct 8, 2025
• CVE-2025-57623A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866_B2022506 allows attackers to cause a Denial of Service.5.3Sep 25, 2025
• CVE-2025-9935TOTOLINK N600R cstecgi.cgi sub_4159F8 command injection7.3Sep 3, 2025
• CVE-2025-51390TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a command injection vulnerability via the pin parameter in the setWiFiWpsConfig function.9.8Aug 4, 2025
• CVE-2025-8181TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation7.2Jul 26, 2025
• CVE-2025-46060Buffer Overflow vulnerability in TOTOLINK N600R v4.3.0cu.7866_B2022506 allows a remote attacker to execute arbitrary code via the UPLOAD_FILENAME component9.8Jun 13, 2025
• CVE-2025-4496TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow8.8May 10, 2025
• CVE-2025-22900Totolink N600R v4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function.9.8Apr 15, 2025
• CVE-2025-22903TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the pin parameter in the function setWiFiWpsConfig.4.6Apr 15, 2025
• CVE-2023-43141TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control.9.8Sep 25, 2023
• CVE-2022-36613TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample.7.8Aug 28, 2022