CVE-2025-55591

Description

TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint.

PUBLISHED Reserved 2025-08-13 | Published 2025-08-18 | Updated 2025-08-18 | Assigner mitre

References

github.com/...ain/A3002R_V4/Boa - Command Injection/PoC 2.md

cve.org (CVE-2025-55591)

nvd.nist.gov (CVE-2025-55591)

Download JSON