Volerion logoVolerion
Volerion logoVolerion

TOTOLINK N200RE Command Injection Vulnerability in setOpModeCfg

Vulnerability

A command injection vulnerability has been identified in the TOTOLINK N200RE router, specifically in the firmware version V9.3.5u.6437_B20230519. The issue arises in the setOpModeCfg function, where user input via hostName is not properly sanitized, allowing for the injection of malicious commands.

Impact

Exploitation of this vulnerability allows for command injection, where an attacker can execute arbitrary commands on the device.

Added: Dec 15, 2025, 5:21 PM
Updated: Dec 15, 2025, 7:21 PM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
7.5
exploitability
7.0
remediation
0.0
relevance
1.4
threat
0.0
urgency
2.9
incentive
5.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.