CVE-2025-55589 – TOTOLINK A3002R OS Command Injection Vulnerability

CVE ID : CVE-2025-55589

Published : Aug. 18, 2025, 8:15 p.m. | 1 hour, 57 minutes ago

Description : TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at /boafrm/formMapDelDevice.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…