← CVE Intelligence

CVE-2025-8937

TOTOLINK N350R formSysCmd command injection PUBLISHED

Description (CNA)

A vulnerability has been found in TOTOLINK N350R 1.2.3-B20130826. This vulnerability affects unknown code of the file /boafrm/formSysCmd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected (CNA)

Vendor / productVersions
TOTOLINK / N350Raffected 1.2.3-B20130826

CWE

CWE-77, CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.