CVE-2025-7154 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B20201216. Affected by this issue is the…
Medium CVSS: 5.3

CVE-2025-7154

A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B20201216. Affected by this issue is the function sub_41A0F8 of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Hostname leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Vendor
Totolink
Product
N200re Firmware
CWE
CWE-77
Yayın Tarihi
2025-07-08 01:15:26
Güncelleme
2025-07-16 19:35:06
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-77 N200re Firmware MEDIUM Totolink 2025

Referanslar

https://github.com/FLY200503/IoT-vul/blob/master/Totolink/N200RE/README.md https://vuldb.com/?ctiid.315092 https://vuldb.com/?id.315092 https://vuldb.com/?submit.606230 https://www.totolink.net/ https://github.com/FLY200503/IoT-vul/blob/master/Totolink/N200RE/README.md