RCE in Totolink N300rt

CVE-2025-34319

TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 (discovered in V2.1.8-B20201030.1539) contain an OS command injection vulnerability in the Boa formWsc handling functionality. An unauthenticated attacker can send…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.040 (89.3th percentile) — read the EPSS interpretation.