CVE-2025-34319: CVE-2025-34319: işletim sistemi komut enjeksiyonu

Açıklama (NVD)

TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 (discovered in V2.1.8-B20201030.1539) contain an OS command injection vulnerability in the Boa formWsc handling functionality. An unauthenticated attacker can send specially crafted requests to trigger command execution via the targetAPSsid request parameter.

Özet bilgiler

CVSS v4.0

9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

%4,26 (yüzdelik 91)

CWE

CWE-78

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• totolink.tw
• www.totolink.net
• www.vulncheck.com
• CWE-78