CVE-2025-25579

Summary

CVE-2025-25579 is a newly discovered vulnerability affecting the TOTOLINK A3002R V4.0.0-B20230531.1404 firmware. The issue lies in the /bin/boa component, which is used to handle web-based administration. An attacker can exploit this vulnerability by sending specially crafted bandstr data to the affected device, leading to command injection and potential unauthorized execution of arbitrary system commands. Successful exploitation could result in significant compromise, including data theft or device takeover. Users are strongly advised to update their firmware to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.