CVE-2025-9935 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was determined in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function sub_4159F8 of the file /web_cste/cgi-bin/cstecg…
Medium CVSS: 6.9

CVE-2025-9935

A vulnerability was determined in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function sub_4159F8 of the file /web_cste/cgi-bin/cstecgi.cgi. Executing manipulation can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Vendor
Totolink
Product
N600r Firmware
CWE
CWE-74
Yayın Tarihi
2025-09-04 10:42:37
Güncelleme
2025-09-29 18:32:03
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 N600r Firmware MEDIUM Totolink 2025

Referanslar

https://github.com/mono7s/TOTOLINK/blob/main/N600R/TOTOLINK%20N600R%20Unauthorized_Command_Injection.md https://vuldb.com/?ctiid.322337 https://vuldb.com/?id.322337 https://vuldb.com/?submit.643088 https://www.totolink.net/