CVE-2020-25499

🗓️ 09 Dec 2020 20:30:55Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 91 Views

TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2020-25499	10 Dec 202000:33	–	circl
CNNVD	TotoLink A3002RU 命令注入漏洞	9 Dec 202000:00	–	cnnvd
CNVD	Totolink TOTOLINK A3002RU Command Injection Vulnerability	11 Dec 202000:00	–	cnvd
Cvelist	CVE-2020-25499	9 Dec 202020:30	–	cvelist
NVD	CVE-2020-25499	9 Dec 202021:15	–	nvd
OSV	CVE-2020-25499	9 Dec 202021:15	–	osv
Prion	Design/Logic Flaw	9 Dec 202021:15	–	prion
Positive Technologies	PT-2020-16101 · Totolink · Totolink A3002Ru	9 Dec 202000:00	–	ptsecurity
The Hacker News	Mirai Botnet Variant Exploits Four-Faith Router Vulnerability for DDoS Attacks	8 Jan 202510:29	–	thn
The Hacker News	Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet	22 Jan 202513:53	–	thn

NVD

Node

totolink a3002r_firmwareRange<1.1.1-b20200824.0128

AND

totolink a3002rMatch-

Node

totolink a3002ru-v1_firmwareRange<3.4.0-b20201030.1754

AND

totolink a3002ru-v1Match-

Node

totolink a3002ru-v2_firmwareRange<2.1.1-b20200911.1756

AND

totolink a3002ru-v2Match-

Node

totolink a702r-v2_firmwareRange<1.0.0-b20201028.1743

AND

totolink a702r-v2Match-

Node

totolink a702r-v3_firmwareRange<1.0.0-b20201103.1713

AND

totolink a702r-v3Match-

Node

totolink n100re-v3_firmwareRange<3.4.0-b20201030.0926

AND

totolink n100re-v3Match-

Node

totolink n150rt_firmwareRange<3.4.0-b20201030.1142

AND

totolink n150rtMatch-

Node

totolink n200re-v3_firmwareRange<3.4.0-b20201029.1811

AND

totolink n200re-v3Match-

Node

totolink n200re-v4_firmwareRange<4.0.0-b20200805.1507

AND

totolink n200re-v4Match-

Node

totolink n210re_firmwareRange<1.0.0-b20201030.2030

AND

totolink n210reMatch-

Node

totolink n300rh-v3_firmwareRange<3.2.4-b20201029.1838

AND

totolink n300rh-v3Match-

Node

totolink n300rt_firmwareRange<3.4.0-b20201026.2033

AND

totolink n300rtMatch-

Node

totolink n302r_plus_firmwareRange<3.4.0-b20201028.2224

AND

totolink n302r_plusMatch-

Source	Link
totolink	www.totolink.net/home/index/newsss/id/196.html
github	www.github.com/kdoos/Vulnerabilities/blob/main/RCE_TOTOLINK-A3002RU-V2

21 Nov 2024 05:18Current

8.8High risk

Vulners AI Score8.8

CVSS 3.18.8

CVSS 29

EPSS0.09167

totolink a3002ru remote user authentication vulnerability