Totolink A702R-V2 Firmware vulnerabilities

1 known vulnerability affecting totolink/a702r-v2_firmware.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

1

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2020-25499HIGHCVSS 8.8Exploitedfixed in 1.0.0-b20201028.17432020-12-09

CVE-2020-25499 [HIGH] CWE-78 CVE-2020-25499: TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router.