← Database

CVE-2025-28035

CRITICAL CVSS: 9.8 Published: 2025-04-22 Modified: 2026-06-17

Description

TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

Affected Platforms

Totolink A3000Ru FirmwareTotolink A810RTotolink A3100R FirmwareTotolink A830R FirmwareTotolink A830RTotolink A3000RuTotolink A3100RTotolink A800RTotolink A950Rg FirmwareTotolink A800R Firmware

Weakness Type

CWE-78

References