CVE-2025-55589

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at /boafrm/formMapDelDevice...

CVE-2025-55589

The TOTOLINK A3002R wireless router, specifically version v4.0.0-B20230531.1404 , is susceptible to multiple OS command injection vulnerabilities. These flaws exist in the microprogramming software at the /boafrm/formMapDelDevice endpoint, triggered through the macstr , bandstr , and clientoff pa...