CVE-2025-28020

Summary

CVE-2025-28020 is a newly discovered vulnerability affecting the TOTOLINK A800R V4.1.2cu.5137_B20200730 firmware. The issue lies in the downloadFile.cgi script, specifically the v25 parameter. A buffer overflow condition has been identified in this component, putting users at risk of arbitrary code execution if the v25 parameter is manipulated maliciously. Exploitation could lead to unauthorized access, data theft, or system compromise. It is strongly recommended that users update their firmware to a secure version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.