CVE-2025-28138

published 2025-03-27

CVE-2025-28138: The TOTOLINK A800R V4.1.2cu.5137_B20200730 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

The TOTOLINK A800R V4.1.2cu.5137_B20200730 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	a800r_firmware	—	—

CWE-78