Critical severity9.8NVD Advisory· Published Apr 22, 2025· Updated Jun 17, 2026

CVE-2025-28039

Description

TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the FileName parameter.

Affected products

Totolink/Ex1200t Firmware
cpe:2.3:o:totolink:ex1200t_firmware:4.1.2cu.5232_b20210713:*:*:*:*:*:*:*
Totolink/EX1200Tcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: V4.1.2cu.5232_B20210713

Patches

Vulnerability mechanics

References

locrian-lightning-dc7.notion.site/RCE2-1ad8e5e2b1a280fbb0cacc7e758e7299nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000