Unrated severityNVD Advisory· Published Apr 22, 2025· Updated Apr 22, 2025

CVE-2025-28039

Description

TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the FileName parameter.

Affected products

Totolink/EX1200Tcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = V4.1.2cu.5232_B20210713

Patches

Vulnerability mechanics

References

locrian-lightning-dc7.notion.site/RCE2-1ad8e5e2b1a280fbb0cacc7e758e7299mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000