Totolink N302r Plus Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Totolink N302r Plus Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-25499 — CVSS 8.8 (high): TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this…
• CVE-2025-5671 — CVSS 8.8 (high): A vulnerability, which was classified as critical, was found in TOTOLINK N302R Plus up to 3.4.0-B20201028. Affected is an unknown function…
• CVE-2025-5672 — CVSS 8.8 (high): A vulnerability has been found in TOTOLINK N302R Plus up to 3.4.0-B20201028 and classified as critical. Affected by this vulnerability is…