Totolink · Totolink N300Rt · CVE-2025-52089
Name of the Vulnerable Software and Affected Versions:
TOTOLINK N300RB firmware versions 8.54
Description:
A hidden remote support feature, protected by a static secret, allows an authenticated attacker to execute arbitrary OS commands with root privileges.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.