CVE-2025-34319

TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 (discovered in V2.1.8-B20201030.1539) contain an OS command injection vulnerability in the Boa formWsc handling functionality. An unauthenticated attacker can send specially crafted requests to trigger command execution via the targetAPSsid request parameter.

CVSS

No CVSS.

References

Link	Resource
https://totolink.tw/support_view/N300RT
https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/154/ids/36.html
https://www.vulncheck.com/advisories/totolink-n300rt-boa-formwsc-rce

Configurations

No configuration.

History

18 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) Versiones de firmware del router inalámbrico TOTOLINK N300RT anteriores a V3.4.0-B20250430 (descubierta en V2.1.8-B20201030.1539) contienen una vulnerabilidad de inyección de comandos del sistema operativo en la funcionalidad de manejo Boa formWsc. Un atacante no autenticado puede enviar solicitudes especialmente diseñadas para desencadenar la ejecución de comandos a través del parámetro de solicitud targetAPSsid.

Information

Published : 2025-12-03 17:15

Updated : 2026-10-18 17:10

NVD link : CVE-2025-34319

Mitre link : CVE-2025-34319

CVE.ORG link : CVE-2025-34319

JSON object : View

Products Affected

No product.

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2025-34319", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-34319", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-03T21:26:50.546941Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "TOTOLINK", "modules": ["Boa formWsc handling functionality", "targetAPSsid request parameter"], "product": "N300RT", "versions": [{"status": "affected", "version": "0", "lessThan": "V3.4.0-B20250430", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-03T17:15:51.840", "references": [{"url": "https://totolink.tw/support_view/N300RT", "source": "disclosure@vulncheck.com"}, {"url": "https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/154/ids/36.html", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/totolink-n300rt-boa-formwsc-rce", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "TOTOLINK N300RT wireless router firmware versions prior to\u00a0V3.4.0-B20250430 (discovered in V2.1.8-B20201030.1539) contain an OS command injection vulnerability in the Boa formWsc handling functionality. An unauthenticated attacker can send specially crafted requests to trigger command execution via the targetAPSsid request parameter."}, {"lang": "es", "value": "Versiones de firmware del router inal\u00e1mbrico TOTOLINK N300RT anteriores a V3.4.0-B20250430 (descubierta en V2.1.8-B20201030.1539) contienen una vulnerabilidad de inyecci\u00f3n de comandos del sistema operativo en la funcionalidad de manejo Boa formWsc. Un atacante no autenticado puede enviar solicitudes especialmente dise\u00f1adas para desencadenar la ejecuci\u00f3n de comandos a trav\u00e9s del par\u00e1metro de solicitud targetAPSsid."}], "lastModified": "2026-10-18T17:10:00.110", "sourceIdentifier": "disclosure@vulncheck.com"}