← All advisories

Critical severity9.8NVD Advisory· Published May 13, 2025· Updated Jun 17, 2026

CVE-2025-45858

CVE-2025-45858

Description

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Totolink/A3002r Firmware
cpe:2.3:o:totolink:a3002r_firmware:4.0.0-b20230531.1404:*:*:*:*:*:*:*
Totolink/A3002RUllm-fuzzy2 versions
v4.0.0-B20230531.1404+ 1 more
- (no CPE)range: v4.0.0-B20230531.1404
- (no CPE)

Patches

Vulnerability mechanics

References

2

github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/injection1.mdnvdExploitThird Party Advisory
www.totolink.net/home/menu/detail/menu_listtpl/download/id/258/ids/36.htmlnvdProduct

News mentions

0

No linked articles in our index yet.