CVE-2025-6299

A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boa/formWSC. The manipulation of the argument targetAPSsid leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-6299

creationtimestamp| type| source ---|---|--- 2025-06-20 02:43:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18896 2025-06-20 03:51:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrz557qwji2i...

CVE-2025-6299

CVE-2025-6299 affects TOTOLINK N150RT 3.4.0-B20190525. A vulnerability in the file /boa/formWSC allows manipulation of the targetAPSsid parameter, causing an OS command injection. Exploitation can be performed remotely, and public proofs-of-concept exist. Connected sources corroborate the impact ...

CVE-2025-6299 TOTOLINK N150RT formWSC os command injection

A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boa/formWSC. The manipulation of the argument targetAPSsid leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...