Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-28017 EUVD-2025-12096GHSA-9cm6-6m3f-x97h

TOTOLINK A800R V4.1.2cu.5032_B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERY_STRING parameter.

Published Apr 23, 2025 · Updated Apr 24, 2025 · Assigned by mitre