CVE-2025-3994: TOTOLINK N150RT IP Port Filtering home.htm cross site scripting
A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been classified as problematic. Affected is an unknown function of the file /home.htm of the component IP Port Filtering. The manipulation of the argument Comment leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3994?
CVE-2025-3994 has been classified as a problematic vulnerability due to its potential for cross-site scripting.
How do I fix CVE-2025-3994?
To fix CVE-2025-3994, it is recommended to update the TOTOLINK N150RT firmware to the latest version provided by the vendor.
Which component is affected by CVE-2025-3994?
CVE-2025-3994 affects the IP Port Filtering feature in the TOTOLINK N150RT device.
What is the attack vector for CVE-2025-3994?
The attack vector for CVE-2025-3994 involves manipulating the 'Comment' argument in the /home.htm file.
Is CVE-2025-3994 specific to any firmware version?
Yes, CVE-2025-3994 specifically affects TOTOLINK N150RT firmware version 3.4.0-B20190525.