Totolink A6000R vulnerabilities

1 known vulnerability affecting totolink/a6000r.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2025-3249MEDIUMCVSS 5.3v1.0.1-B20201211.20002025-04-04

CVE-2025-3249 [MEDIUM] CWE-74 CVE-2025-3249: A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected b A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability is the function apcli_cancel_wps of the file /usr/lib/lua/luci/controller/mtkwifi.lua. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.