CVE-2025-28137

Critical · 9.8

CVSS

9.8

EPSS

34.1%

Published

Apr 15, 2025

CISA due date

—

The record

The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

Affected packages

Ecosystem	Package	Introduced	Fixed