Totolink N300RH vulnerabilities

Totolink N300RH router with firmware 6.1c.1353_B20190305 has a stack-based buffer overflow vulnerability in the setWiFiBasicConfig function of the wireless.so file. An attacker can exploit this remotely via the KeyStr argument.

A vulnerability in the Totolink N300RH router version 6.1c.1353_B20190305 allows a remote attacker to inject OS commands via the admpass argument in the setPasswordCfg function of the web management interface.

A vulnerability was identified in Totolink N300RH 6.1c.1353_B20190305. It affects the setUploadSetting function in /cgi-bin/cstecgi.cgi. Manipulation of the FileName argument leads to file inclusion. The attack may be performed remotely, and the exploit is publicly available and might be used.