[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYzQj6Rhz7FxscjLIg9cjkL2JyE3gKFK2vIuFV9kWSQ8":3,"g5a-ex:totolink\u002Fn150rt_firmware@*":102,"g5a-family:totolink\u002Fn150rt_firmware":104},{"success":4,"data":5},true,{"product":6,"versions":21,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":79,"seoMetadata":80,"meta":99},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":20},"totolink","n150rt_firmware",2,18,0,"2025-05-09",[14,17],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.0",false,{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},"3.4.0-b20190525",13,"N150rt Firmware by Totolink is a technology product with 2 tracked versions and 18 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[22,23],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},[25,33,39,46,51,55,62,67,71,75],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":16,"epssScore":32},"CVE-2019-19825","On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {\"topicurl\":\"setting\u002FgetSanvas\"} POST to the boafrm\u002FformLogin URI, leading to a CAPTCHA bypass. (Also, the CAPTCHA text is not needed once the attacker has determined valid credentials. The attacker can perform router actions via HTTP requests with Basic Authentication.) This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0.","2020-01-27",9.8,"v3.1","Critical",0.29557,{"cveId":34,"description":35,"publishedDate":28,"cvssScore":36,"cvssVersion":30,"severity":37,"isKev":16,"epssScore":38},"CVE-2019-19824","On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm\u002FformSysCmd URI, even if the GUI (syscmd.htm) is not available. This allows for full control over the device's internals. This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, N100RE through 3.4.0, and N302RE 2.0.2.",8.8,"High",0.25135,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":30,"severity":44,"isKev":16,"epssScore":45},"CVE-2025-3987","A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unknown processing of the file \u002Fboafrm\u002FformWsc. The manipulation of the argument localPin leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.","2025-04-27",6.3,"Medium",0.11278,{"cveId":47,"description":48,"publishedDate":28,"cvssScore":49,"cvssVersion":30,"severity":37,"isKev":16,"epssScore":50},"CVE-2019-19822","A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords). This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0; Rutek RTK 11N AP through 2019-12-12; Sapido GR297n through 2019-12-12; CIK TELECOM MESH ROUTER through 2019-12-12; KCTVJEJU Wireless AP through 2019-12-12; Fibergate FGN-R2 through 2019-12-12; Hi-Wifi MAX-C300N through 2019-12-12; HCN MAX-C300N through 2019-12-12; T-broad GN-866ac through 2019-12-12; Coship EMTA AP through 2019-12-12; and IO-Data WN-AC1167R through 2019-12-12.",7.5,0.08669,{"cveId":52,"description":53,"publishedDate":28,"cvssScore":49,"cvssVersion":30,"severity":37,"isKev":16,"epssScore":54},"CVE-2019-19823","A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0; Rutek RTK 11N AP through 2019-12-12; Sapido GR297n through 2019-12-12; CIK TELECOM MESH ROUTER through 2019-12-12; KCTVJEJU Wireless AP through 2019-12-12; Fibergate FGN-R2 through 2019-12-12; Hi-Wifi MAX-C300N through 2019-12-12; HCN MAX-C300N through 2019-12-12; T-broad GN-866ac through 2019-12-12; Coship EMTA AP through 2019-12-12; and IO-Data WN-AC1167R through 2019-12-12.",0.06411,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":30,"severity":60,"isKev":16,"epssScore":61},"CVE-2025-3994","A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been classified as problematic. Affected is an unknown function of the file \u002Fhome.htm of the component IP Port Filtering. The manipulation of the argument Comment leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.","2025-04-28",2.4,"Low",0.05032,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":36,"cvssVersion":30,"severity":37,"isKev":16,"epssScore":66},"CVE-2020-25499","TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router.","2020-12-09",0.04203,{"cveId":68,"description":69,"publishedDate":12,"cvssScore":36,"cvssVersion":30,"severity":37,"isKev":16,"epssScore":70},"CVE-2025-4462","A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. This issue affects some unknown processing of the file \u002Fboafrm\u002FformWsc. The manipulation of the argument localPin leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",0.02017,{"cveId":72,"description":73,"publishedDate":42,"cvssScore":36,"cvssVersion":30,"severity":37,"isKev":16,"epssScore":74},"CVE-2025-3988","A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected is an unknown function of the file \u002Fboafrm\u002FformPortFw. The manipulation of the argument service_type leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",0.01435,{"cveId":76,"description":77,"publishedDate":58,"cvssScore":36,"cvssVersion":30,"severity":37,"isKev":16,"epssScore":78},"CVE-2025-3991","A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file \u002Fboafrm\u002FformWdsEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",0.01042,[],{"title":81,"metaDescription":82,"keywords":83,"structuredData":84},"N150rt Firmware by Totolink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for N150rt Firmware by Totolink covering 2 versions with 18 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","N150rt Firmware vulnerabilities, N150rt Firmware security, N150rt Firmware CVE, Totolink N150rt Firmware, N150rt Firmware threat intelligence, Totolink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":85,"@type":86,"name":87,"description":82,"url":88,"manufacturer":89,"applicationCategory":93,"softwareVersion":94,"mainEntity":95},"https:\u002F\u002Fschema.org","SoftwareApplication","N150rt Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftotolink\u002Fn150rt_firmware",{"@type":90,"name":91,"url":92},"Organization","Totolink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftotolink","Security Software","2 versions tracked",{"@type":96,"name":97,"description":98,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","N150rt Firmware Security Vulnerabilities","Security vulnerabilities affecting N150rt Firmware by Totolink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":100,"apiVersion":101},"2026-10-18T20:41:46.527Z","3.0",{"rows":103,"total":11,"capped":16,"failed":11},[],[]]