CVE-2025-6485 | TOTOLINK A3002R 1.1.1-B20200824.0128 /boafrm/formWlSiteSurvey wlanif os command injection

June 21, 2025 Yanac

A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been classified as critical. This affects the function formWlSiteSurvey of the file /boafrm/formWlSiteSurvey. The manipulation of the argument wlanif leads to os command injection.

This vulnerability is uniquely identified as CVE-2025-6485. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More