Lucene search
K

CVE-2025-4850

๐Ÿ—“๏ธย 18 May 2025ย 03:00:09Reported byย VulDBTypeย 
cve
ย cve
๐Ÿ”—ย web.nvd.nist.gov๐Ÿ“ฐ๏ธย 1ย Media mentions๐Ÿ‘ย 29ย Views๐ŸŒ WEB

Critical vulnerability in TOTOLINK N300RH allows remote command injection via plugin_name manipulation.

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
Circl
CVE-2025-4850
18 May 202503:35
โ€“circl
CNNVD
TOTOLINK N300RH ๆณจๅ…ฅๆผๆดž
18 May 202500:00
โ€“cnnvd
CNVD
TOTOLINK N300RH plugin_name parameter command injection vulnerability
22 May 202500:00
โ€“cnvd
Cvelist
CVE-2025-4850 TOTOLINK N300RH cstecgi.cgi setUnloadUserData command injection
18 May 202503:00
โ€“cvelist
EUVD
EUVD-2025-15698
3 Oct 202520:07
โ€“euvd
NVD
CVE-2025-4850
18 May 202503:15
โ€“nvd
Positive Technologies
PT-2025-21825 ยท Totolink ยท Totolink N300Rt
18 May 202500:00
โ€“ptsecurity
RedhatCVE
CVE-2025-4850
20 May 202523:18
โ€“redhatcve
Vulnrichment
CVE-2025-4850 TOTOLINK N300RH cstecgi.cgi setUnloadUserData command injection
18 May 202503:00
โ€“vulnrichment
NVD
Node
totolinkn300rh_firmwareMatch6.1c.1390_b20191101
AND
[
  {
    "vendor": "TOTOLINK",
    "product": "N300RH",
    "versions": [
      {
        "version": "6.1c.1390_B20191101",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
plugin_namequery param/cgi-bin/cstecgi.cgiRemote command injection via plugin_name parameter in /cgi-bin/cstecgi.cgi (function setUnloadUserData); exploit disclosed publicly.CWE-74,ย CWE-77

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

24 May 2025 00:57Current
7.8High risk
Vulners AI Score7.8
CVSS 45.3
CVSS 3.16.3
CVSS 26.5
CVSS 36.3
EPSS0.01385
SSVC
29