mirror of
https://github.com/0xMarcio/cve.git
synced 2025-11-30 18:56:19 +00:00
765 B
765 B
CVE-2025-28138
Description
The TOTOLINK A800R V4.1.2cu.5137_B20200730 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
POC
Reference
- https://github.com/Zerone0x00/CVE/blob/main/TOTOLINK/CVE-2025-28138.md
- https://sudsy-eyeliner-a59.notion.site/RCE2-1ac72b8cd95f8055a76ee0ca262aac1a?pvs=4
Github
No PoCs found on GitHub currently.