critical9.8
CVE-2025-55591
TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint.
Impact
TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A3002r Firmware | Version 4.0.0-b20230531.1404 |