CVE-2025-3995

CVSS 3.1 Score 3.4 of 10 (low)

Details

Published Apr 28, 2025
Updated: May 12, 2025
CWE ID 94
CWE ID 79

Summary

CVE-2025-3995 is a newly disclosed vulnerability affecting the TOTOLINK N150RT 3.4.0-B20190525 firmware. The issue lies within the LAN Settings Page and particularly the /boafrm/fromStaticDHCP file. An attacker can exploit this vulnerability by manipulating the Hostname argument, leading to cross-site scripting (XSS). This attack can be launched remotely, increasing the severity of the threat. The exploit for this vulnerability has been made public, potentially increasing the risk for targeted attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • TOTOLINK N150RT

Affected Vendors

  • TOTOLINK

Advisories, Assessments, and Mitigations