Totolink A3002Ru-V2 Firmware vulnerabilities

1 known vulnerability affecting totolink/a3002ru-v2_firmware.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

1

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2020-25499HIGHCVSS 8.8Exploitedfixed in 2.1.1-b20200911.17562020-12-09

CVE-2020-25499 [HIGH] CWE-78 CVE-2020-25499: TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router.