PT-2025-17543 · Totolink · Totolink A800R+5

Published

2025-04-22

·

Updated

2025-04-25

·

CVE-2025-28034

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TOTOLINK A800R version 4.1.2cu.5137 B20200730 TOTOLINK A810R version 4.1.2cu.5182 B20201026 TOTOLINK A830R version 4.1.2cu.5182 B20201102 TOTOLINK A950RG version 4.1.2cu.5161 B20200903 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5247 B20211129
Description The issue concerns a pre-auth remote command execution vulnerability in the NTPSyncWithHost function through the hostTime parameter. This allows for unauthorized execution of commands.
Recommendations For TOTOLINK A800R version 4.1.2cu.5137 B20200730, consider disabling the NTPSyncWithHost function until a patch is available. For TOTOLINK A810R version 4.1.2cu.5182 B20201026, restrict access to the hostTime parameter to minimize the risk of exploitation. For TOTOLINK A830R version 4.1.2cu.5182 B20201102, avoid using the hostTime parameter in the affected function until the issue is resolved. For TOTOLINK A950RG version 4.1.2cu.5161 B20200903, consider temporarily disabling the NTPSyncWithHost function to prevent exploitation. For TOTOLINK A3000RU version 5.9c.5185 B20201128, restrict access to the vulnerable function to minimize the risk of exploitation. For TOTOLINK A3100R version 4.1.2cu.5247 B20211129, avoid using the hostTime parameter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2025-05798
CVE-2025-28034

Affected Products

Totolink A3000Ru
Totolink A3100R
Totolink A800R
Totolink A810R
Totolink A830R
Totolink A950Rg