medium6.5
CVE-2025-55589
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters…
Impact
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at /boafrm/formMapDelDevice.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A3002r Firmware | Version 4.0.0-b20230531.1404 |