PT-2025-13265 · Totolink · Totolink A800R

Published 2025-03-27 · Updated 2025-03-29 · CVE-2025-28138

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TOTOLINK A800R version 4.1.2cu.5137 B20200730

Description The issue concerns a remote command execution flaw. Unauthenticated attackers can run arbitrary commands. There have been spotted exploits. It is recommended to monitor logs.

Recommendations For version 4.1.2cu.5137 B20200730, disable remote management as a temporary workaround to minimize the risk of exploitation. Restrict access to the NoticeUrl parameter in the setNoticeCfg function to prevent unauthorized command execution. Monitor logs for suspicious activity.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-28138

Affected Products

Totolink A800R

References · 6

• 🔥 https://github.com/Zerone0x00/CVE/blob/main/TOTOLINK/CVE-2025-28138.md · Exploit
• 🔥 https://sudsy-eyeliner-a59.notion.site/RCE2-1ac72b8cd95f8055a76ee0ca262aac1a?pvs=4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-28138 · Security Note
• https://osv.dev/vulnerability/CVE-2025-28138 · Vendor Advisory
• https://twitter.com/RedTeamNewsBlog/status/1905772584194482585 · Twitter Post
• https://twitter.com/CVEnew/status/1906038453902688388 · Twitter Post