CVE-2025-28256

published 2025-03-28

CVE-2025-28256: An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file /lib/cste_modules/wireless.so.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	a3100r_firmware	—	—

CWE-78