← Back to browse · API

CVE-2025-28137

Severity
CRITICAL
CVSS
9.8
EPSS
0.13511
Risk score
43.93
CISA KEV
No
PoC
No
Published
2025-04-15
Modified
2025-04-15
First seen
2026-08-07
Aliases
EUVD-2025-10972, GHSA-FCHW-692R-4W73
Products
n/a:n/a n/a
Sources
euvd EUVD-2025-10972

Description

The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

References