CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/04/26 5:25 a.m.•26 views

CVE-2025-28017

TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...

6.5CVSS7.3AI score0.01149EPSS

SaveExploits1References1

NVD•added 2025/04/23 5:16 p.m.•30 views

CVE-2025-28017

TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...

6.5CVSS0.01149EPSS

SaveExploits1References2

Cvelist•added 2025/04/23 12:0 a.m.•48 views

CVE-2025-28017

TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...

0.01149EPSS

SaveExploits1References2

Vulnrichment•added 2025/04/23 12:0 a.m.•9 views

CVE-2025-28017

TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...

7.3AI score0.01149EPSS

SaveExploits1References2

CVE•added 2025/04/23 12:0 a.m.•72 views

CVE-2025-28017

CVE-2025-28017 affects TOTOLINK A800R, version 4.1.2cu.5032_B20200408, with a Command Injection vulnerability in downloadFile.cgi exploitable via QUERY_STRING. Root cause per sources: failure to properly filter constructed command characters in that parameter. Impacts include potential remote com...

6.5CVSS7.5AI score0.01149EPSS

SaveExploits1References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by