CVE-2025-52089

The TOTOLINK N300RB wireless router (firmware version 8.54 ) is vulnerable to a command injection flaw. The root cause is a hidden remote support feature that relies on a static secret for protection, which fails to properly neutralize special elements. An authenticated attacker can exploit this ...

PT-2025-29234

Name of the Vulnerable Software and Affected Versions: TOTOLINK N300RB firmware versions 8.54 Description: A hidden remote support feature, protected by a static secret, allows an authenticated attacker to execute arbitrary OS commands with root privileges. Recommendations: At the moment, there i...