Totolink A3002Ru-V1 Firmware vulnerabilities

1 known vulnerability affecting totolink/a3002ru-v1_firmware.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

1

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2020-25499HIGHCVSS 8.8Exploitedfixed in 3.4.0-b20201030.17542020-12-09

CVE-2020-25499 [HIGH] CWE-78 CVE-2020-25499: TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router.