Critical · 9.8 CVE-2025-55591 EUVD-2025-28602GHSA-c5fc-3737-qpvj

TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMap…

Published Aug 18, 2025 · Updated Aug 18, 2025 · Assigned by mitre

Description

TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint.

References

https://github.com/goldenGlow21/softwares_PoC/blob/main/A3002R_V4/Boa%20-%20Command%20Injection/PoC%202.md