CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/04/26 5:25 a.m.•22 views

CVE-2025-28017

TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...

6.5CVSS7.3AI score0.01146EPSS

Exploits1References1

NVD•added 2025/04/23 5:16 p.m.•25 views

CVE-2025-28017

TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...

6.5CVSS0.01146EPSS

Exploits1References2

Cvelist•added 2025/04/23 12:0 a.m.•38 views

CVE-2025-28017

TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...

0.01146EPSS

Exploits1References2

CVE•added 2025/04/23 12:0 a.m.•65 views

CVE-2025-28017

CVE-2025-28017 affects TOTOLINK A800R, version 4.1.2cu.5032_B20200408, with a Command Injection vulnerability in downloadFile.cgi exploitable via QUERY_STRING. Root cause per sources: failure to properly filter constructed command characters in that parameter. Impacts include potential remote com...

6.5CVSS7.5AI score0.01146EPSS

Exploits1References2Affected Software1