CVE-2025-28036
published 2025-04-22CVE-2025-28036: TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the…
critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| totolink | a3000ru_firmware | — | — |
| totolink | a3100r_firmware | — | — |
| totolink | a800r_firmware | — | — |
| totolink | a810r_firmware | — | — |
| totolink | a830r_firmware | — | — |
| totolink | a950rg_firmware | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vulncheck9.8CRITICAL