Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-45798

A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112. The vulnerability is located in the setNoticeCfg interface within the /lib/cste_modules/system.so library, specifically in the processing of the IpTo parameter.

Published

2025-05-08T20:15:30.550

Last Modified

2025-05-19T15:08:18.653

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-77
  • Type: Secondary
    CWE-77
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System totolink a950rg_firmware 4.1.2cu.5204_b20210112 Yes
Hardware totolink a950rg - No
References