Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-34319

TOTOLINK N300RT <= V2.1.8-B20201030.1539 Boa formWsc RCE

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 (discovered in V2.1.8-B20201030.1539) contain an OS command injection vulnerability in the Boa formWsc handling functionality. An unauthenticated attacker can send specially crafted requests to trigger command execution via the targetAPSsid request parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TOTOLINK N300RT

Default version status: unaffected

  • 0 to < V3.4.0-B20250430affected

References