high8.8Public exploit code
CVE-2025-52089
A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authenticated attacker to execute arbitrary OS …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TOTOLINK N300RB 8.54 - Command Execution2025-07-16 · hardware · multiple
Impact
A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authenticated attacker to execute arbitrary OS commands with root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | N300rb Firmware | Version 8.54 |