CVE-2025-6299 | TOTOLINK N150RT 3.4.0-B20190525 /boa/formWSC targetAPSsid os command injection

June 19, 2025 Yanac

A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boa/formWSC. The manipulation of the argument targetAPSsid leads to os command injection.

This vulnerability is uniquely identified as CVE-2025-6299. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More