critical9.8
CVE-2025-52046
Totolink A3300R V17.0.0cu.596_B20250515 was found to contain a command injection vulnerability in the sub_4197C0 function via the mac and desc parameters.
Impact
Totolink A3300R V17.0.0cu.596_B20250515 was found to contain a command injection vulnerability in the sub_4197C0 function via the mac and desc parameters. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A3300r Firmware | Version 17.0.0cu.596_b20250515 |