CVE-2025-34319: TOTOLINK N300RT <= V2.1.8-B20201030.1539 Boa formWsc RCE
TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 (discovered in V2.1.8-B20201030.1539) contain an OS command injection vulnerability in the Boa formWsc handling functionality. An unauthenticated attacker can send specially crafted requests to trigger command execution via the targetAPSsid request parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34319?
CVE-2025-34319 is rated as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2025-34319?
To fix CVE-2025-34319, update your TOTOLINK N300RT router firmware to version V3.4.0-B20250430 or later.
What type of vulnerability is CVE-2025-34319?
CVE-2025-34319 is an OS command injection vulnerability affecting the Boa formWsc handling functionality.
Who is affected by CVE-2025-34319?
CVE-2025-34319 affects users of the TOTOLINK N300RT wireless router running firmware prior to V3.4.0-B20250430.
Can CVE-2025-34319 be exploited remotely?
Yes, CVE-2025-34319 can be exploited by unauthenticated attackers through specially crafted requests.