CVE-2025-55589

published 2025-08-18

CVE-2025-55589: TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters…

medium 6.5 CVSS 3.1

AV N AC L PR N UI N S U C L I L A N

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at /boafrm/formMapDelDevice.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	a3002r_firmware	—	—

CWE-78