CVE-2025-3995 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of…
Medium CVSS: 4.8

CVE-2025-3995

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /boafrm/fromStaticDHCP of the component LAN Settings Page. The manipulation of the argument Hostname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Vendor
Totolink
Product
N150rt Firmware
CWE
CWE-79
Yayın Tarihi
2025-04-28 02:15:14
Güncelleme
2025-05-12 19:30:44
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-79 N150rt Firmware MEDIUM Totolink 2025

Referanslar

https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/XSS_LAN_settings https://vuldb.com/?ctiid.306331 https://vuldb.com/?id.306331 https://vuldb.com/?submit.557946 https://www.totolink.net/