← Database

CVE-2025-28036

CRITICAL CVSS: 9.8 Published: 2025-04-22 Modified: 2026-06-17

Description

TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

Affected Platforms

Totolink A3000Ru FirmwareTotolink A810RTotolink A3100R FirmwareTotolink A830R FirmwareTotolink A830RTotolink A3000RuTotolink A800RTotolink A3100RTotolink A950Rg FirmwareTotolink A800R Firmware

Weakness Type

CWE-78

References