[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCOfCsN0ucsb8iZ4Sd0U3OpubHd9jo8A138_wUGtVgQg":3,"g5a-ex:totolink\u002Flr350@*":88,"g5a-family:totolink\u002Flr350":90},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":65,"seoMetadata":66,"meta":85},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"totolink","lr350",0,29,"2025-10-31",[],"Lr350 by Totolink is a technology product and 29 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,33,40,44,48,51,54,57,60],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2024-35387","TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.","2024-05-24",9.8,"v3.1","Critical",false,0.06071,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":23,"epssScore":32},"CVE-2024-7214","A vulnerability has been found in TOTOLINK LR350 9.3.5u.6369_B20220309 and classified as critical. Affected by this vulnerability is the function setWanCfg of the file \u002Fcgi-bin\u002Fcstecgi.cgi. The manipulation of the argument hostName leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272785 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","2024-07-30",5.3,"v4.0","Medium",0.03152,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":21,"severity":38,"isKev":23,"epssScore":39},"CVE-2022-44258","TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function.","2022-11-23",8.8,"High",0.02446,{"cveId":41,"description":42,"publishedDate":36,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":43},"CVE-2022-44255","TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function via long post data.",0.02276,{"cveId":45,"description":46,"publishedDate":36,"cvssScore":37,"cvssVersion":21,"severity":38,"isKev":23,"epssScore":47},"CVE-2022-44254","TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter text in the setSmsCfg function.",0.02212,{"cveId":49,"description":50,"publishedDate":36,"cvssScore":37,"cvssVersion":21,"severity":38,"isKev":23,"epssScore":47},"CVE-2022-44253","TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function.",{"cveId":52,"description":53,"publishedDate":36,"cvssScore":37,"cvssVersion":21,"severity":38,"isKev":23,"epssScore":47},"CVE-2022-44257","TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter pppoeUser in the setOpModeCfg function.",{"cveId":55,"description":56,"publishedDate":36,"cvssScore":37,"cvssVersion":21,"severity":38,"isKev":23,"epssScore":47},"CVE-2022-44260","TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter sPort\u002FePort in the setIpPortFilterRules function.",{"cveId":58,"description":59,"publishedDate":36,"cvssScore":37,"cvssVersion":21,"severity":38,"isKev":23,"epssScore":47},"CVE-2022-44259","TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParentalRules function.",{"cveId":61,"description":62,"publishedDate":63,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":64},"CVE-2023-37146","TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.","2023-07-07",0.01958,[],{"title":67,"metaDescription":68,"keywords":69,"structuredData":70},"Lr350 by Totolink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Lr350 by Totolink with 29 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Lr350 vulnerabilities, Lr350 security, Lr350 CVE, Totolink Lr350, Lr350 threat intelligence, Totolink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":71,"@type":72,"name":73,"description":68,"url":74,"manufacturer":75,"applicationCategory":79,"softwareVersion":80,"mainEntity":81},"https:\u002F\u002Fschema.org","SoftwareApplication","Lr350","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftotolink\u002Flr350",{"@type":76,"name":77,"url":78},"Organization","Totolink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftotolink","Security Software","Multiple versions",{"@type":82,"name":83,"description":84,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Lr350 Security Vulnerabilities","Security vulnerabilities affecting Lr350 by Totolink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":86,"apiVersion":87},"2026-10-17T20:52:36.210Z","3.0",{"rows":89,"total":9,"capped":23,"failed":9},[],[91],{"product":92,"cves":10},"lr350_firmware"]