Skip to content
OpenAdvisories

Product · Toto Link

LR350

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-1150

    Totolink LR350 POST Request cstecgi.cgi setTracerouteCfg command injection

    A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. Impacted is the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument command results in command injectio…

    Toto Link LR350
  • Medium 6.3
    CVE-2026-1149

    Totolink LR350 POST Request cstecgi.cgi setDiagnosisCfg command injection

    A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument ip leads to command injection. The…

    Toto Link LR350
  • Medium 5.3
    CVE-2024-10654 Public exploit

    TOTOLINK LR350 formLoginAuth.htm authorization

    A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to autho…

    Toto Link LR350
  • Medium 6.3
    CVE-2024-7214

    TOTOLINK LR350 cstecgi.cgi setWanCfg command injection

    A vulnerability has been found in TOTOLINK LR350 9.3.5u.6369_B20220309 and classified as critical. Affected by this vulnerability is the function setWanCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to command injection.…

    Toto Link LR350