CVE-2025-3987

CVE-2025-3987 affects TOTOLINK N150RT 3.4.0-B20190525. The vulnerability is a command injection in the /boafrm/formWsc endpoint caused by unsafely handling the localPin parameter. Remote attacker could exploit this to execute arbitrary commands with low privileges; exploit has been publicly discl...

CVE-2025-3987 TOTOLINK N150RT formWsc command injection

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to command injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-3987 TOTOLINK N150RT formWsc command injection

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to command injection. The attack may be initiated remotely. The exploit has been...