A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formPortFw (port-forwarding configuration handler) and is triggered by the ip_subnet and fw_ip request parameters during the rule-addition flow.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Totolink |
|
No data.
No data.
References
History
Thu, 01 Oct 2026 01:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Buffer Overflow in TOTOLINK N150RT Web Interface Allows Remote Code Execution |
Wed, 30 Sep 2026 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Wed, 30 Sep 2026 11:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-121 |
Wed, 30 Sep 2026 03:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Totolink
Totolink n150rt |
|
| Vendors & Products |
Totolink
Totolink n150rt |
Tue, 29 Sep 2026 21:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formPortFw (port-forwarding configuration handler) and is triggered by the ip_subnet and fw_ip request parameters during the rule-addition flow. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2026-09-29T00:00:00.000Z
Updated: 2026-09-30T16:47:02.425Z
Reserved: 2026-09-22T00:00:00.000Z
Link: CVE-2026-94952
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2026-09-29T21:19:39.433
Modified: 2026-09-30T17:16:51.753
Link: CVE-2026-94952
Redhat
No data.