CVE-2025-25579

CRITICAL CVSS: 9.8 Published: 2025-03-28 Modified: 2026-06-17

Description

TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.

Affected Platforms

Totolink A3002RTotolink A3002R Firmware

Weakness Type

CWE-78

References