← Back to browse · API

CVE-2025-51390

Severity

CRITICAL

CVSS

9.8

EPSS

0.01796

Risk score

39.83

CISA KEV

No

PoC

No

Published

2025-08-04

Modified

2026-07-05

First seen

2026-08-07

Aliases

EUVD-2025-23538, GHSA-MXGH-9H4R-VP5W

Products

n/a:n/a n/a

Sources

euvd EUVD-2025-23538

Description

TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a command injection vulnerability via the pin parameter in the setWiFiWpsConfig function.

References