← All advisories

Critical severity9.8NVD Advisory· Published Mar 28, 2025· Updated Jun 17, 2026

CVE-2025-25579

CVE-2025-25579

Description

TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Totolink/A3002r Firmware
cpe:2.3:o:totolink:a3002r_firmware:4.0.0-b20230531.1404:*:*:*:*:*:*:*
Totolink/A3002RUcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: V4.0.0-B20230531.1404

Patches

Vulnerability mechanics

References

1

gist.github.com/regainer27/0abf6f56eae3fa2826d2551e22c2ace3nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.