Skip to main content

Totolink N300RH EUVD-2026-33509

| CVE-2026-10187 HIGH
Stack-based Buffer Overflow (CWE-121)
2026-05-31 VulDB GHSA-f783-rqc9-65mx
Buffer Overflow Stack Overflow
8.9
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

6
Analysis Updated
May 31, 2026 - 15:29 vuln.today
v3 (cvss_changed)
Analysis Updated
May 31, 2026 - 15:29 vuln.today
v2 (cvss_changed)
Re-analysis Queued
May 31, 2026 - 15:22 vuln.today
cvss_changed
Severity Changed
May 31, 2026 - 15:22 NVD
CRITICAL HIGH
CVSS changed
May 31, 2026 - 15:22 NVD
9.8 (CRITICAL) 8.9 (HIGH)
Analysis Generated
May 31, 2026 - 15:20 vuln.today

DescriptionNVD

A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument KeyStr results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.

AnalysisAI

Stack-based buffer overflow in the Totolink N300RH router (firmware 6.1c.1353_B20190305) allows remote attackers to corrupt memory via the KeyStr argument processed by the setWiFiBasicConfig function in wireless.so, reachable through the Web Management Interface. Publicly available exploit code exists, and the CVSS 4.0 vector indicates network-reachable, unauthenticated exploitation with high impact to confidentiality, integrity, and availability. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Conduct inventory of all Totolink N300RH routers in operation and identify firmware versions. Within 7 days: Disable public internet access to the web management interface and implement IP-based access controls (restrict to management VLANs only). …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

EUVD-2026-33509 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy