← Database

CVE-2025-28034

CRITICAL CVSS: 9.8 Published: 2025-04-22 Modified: 2026-06-17

Description

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost function through the hostTime parameter.

Affected Platforms

Totolink A3000Ru FirmwareTotolink A810RTotolink A3100R FirmwareTotolink A830R FirmwareTotolink A830RTotolink A3000RuTotolink A800RTotolink A3100RTotolink A950Rg FirmwareTotolink A800R Firmware

Weakness Type

CWE-78

References