CVE-2025-3987: TOTOLINK N150RT formWsc command injection
A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3987?
CVE-2025-3987 has been rated as critical due to its potential for remote command injection.
How does CVE-2025-3987 exploit the TOTOLINK N150RT?
CVE-2025-3987 exploits the TOTOLINK N150RT by manipulating the localPin argument in the /boafrm/formWsc file to achieve command injection.
Can CVE-2025-3987 be exploited remotely?
Yes, CVE-2025-3987 can be exploited remotely, allowing attackers to compromise the device from outside the network.
What systems are affected by CVE-2025-3987?
CVE-2025-3987 affects the TOTOLINK N150RT running version 3.4.0-B20190525 and possibly other versions.
How can I fix CVE-2025-3987 on my TOTOLINK N150RT?
To fix CVE-2025-3987, update your TOTOLINK N150RT firmware to the latest version provided by the manufacturer.