{"advisories":[{"id":"EUVD-2025-12208","source":"euvd","title":"TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-12208"}],"cve":"CVE-2025-28036","epss":{"score":0.01342},"mitre":{"cpes":[],"created":"2025-04-22T00:00:00+00:00","description":"TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2025/28xxx/CVE-2025-28036.json","references":["https://locrian-lightning-dc7.notion.site/RCE1-1a98e5e2b1a28081880dd817104b3af4"],"title":null,"updated":"2025-04-23T14:14:20.242000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:h:totolink:a3000ru:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a3100r:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a800r:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a810r:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a830r:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a950rg:-:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a3000ru_firmware:5.9c.5185_b20201128:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a3100r_firmware:4.1.2cu.5247_b20211129:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a800r_firmware:4.1.2cu.5137_b20200730:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a810r_firmware:4.1.2cu.5182_b20201026:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a830r_firmware:4.1.2cu.5182_b20201102:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a950rg_firmware:4.1.2cu.5161_b20200903:*:*:*:*:*:*:*"],"created":"2025-04-22T18:15:59.260000+00:00","description":"TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"nvd_repo_path":"2025/CVE-2025-28036.json","references":["https://locrian-lightning-dc7.notion.site/CVE-2025-28035-CVE-2025-28036-RCE1-1a98e5e2b1a28081880dd817104b3af4","https://locrian-lightning-dc7.notion.site/RCE1-1a98e5e2b1a28081880dd817104b3af4"],"title":null,"updated":"2026-06-17T09:04:30.440000+00:00","vendors":["totolink","totolink$PRODUCT$a3000ru","totolink$PRODUCT$a3000ru_firmware","totolink$PRODUCT$a3100r","totolink$PRODUCT$a3100r_firmware","totolink$PRODUCT$a800r","totolink$PRODUCT$a800r_firmware","totolink$PRODUCT$a810r","totolink$PRODUCT$a810r_firmware","totolink$PRODUCT$a830r","totolink$PRODUCT$a830r_firmware","totolink$PRODUCT$a950rg","totolink$PRODUCT$a950rg_firmware"],"weaknesses":["CWE-78"]},"opencve":{"changes":[{"created":"2025-04-22T17:30:00+00:00","data":[{"details":{"new":"TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.","old":null},"type":"description"},{"details":{"added":["https://locrian-lightning-dc7.notion.site/RCE1-1a98e5e2b1a28081880dd817104b3af4"],"removed":[]},"type":"references"}],"id":"5e35a9f1-5efa-428f-ad4b-970aba3c0214"},{"created":"2025-04-23T15:15:00+00:00","data":[{"details":{"added":["CWE-78"],"removed":[]},"type":"weaknesses"},{"details":{"added":["https://locrian-lightning-dc7.notion.site/CVE-2025-28035-CVE-2025-28036-RCE1-1a98e5e2b1a28081880dd817104b3af4"],"removed":[]},"type":"references"},{"details":{"added":{"cvssV3_1":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"ssvc":{"options":{"Automatable":"yes","Exploitation":"poc","Technical Impact":"total"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"87329bf2-6c8f-4375-9971-e51d0ca2158c"},{"created":"2025-04-29T16:45:00+00:00","data":[{"details":["totolink","totolink$PRODUCT$a3000ru","totolink$PRODUCT$a3000ru_firmware","totolink$PRODUCT$a3100r","totolink$PRODUCT$a3100r_firmware","totolink$PRODUCT$a800r","totolink$PRODUCT$a800r_firmware","totolink$PRODUCT$a810r","totolink$PRODUCT$a810r_firmware","totolink$PRODUCT$a830r","totolink$PRODUCT$a830r_firmware","totolink$PRODUCT$a950rg","totolink$PRODUCT$a950rg_firmware"],"type":"first_time"},{"details":{"added":["cpe:2.3:h:totolink:a3000ru:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a3100r:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a800r:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a810r:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a830r:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a950rg:-:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a3000ru_firmware:5.9c.5185_b20201128:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a3100r_firmware:4.1.2cu.5247_b20211129:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a800r_firmware:4.1.2cu.5137_b20200730:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a810r_firmware:4.1.2cu.5182_b20201026:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a830r_firmware:4.1.2cu.5182_b20201102:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a950rg_firmware:4.1.2cu.5161_b20200903:*:*:*:*:*:*:*"],"removed":[]},"type":"cpes"},{"details":{"added":["totolink","totolink$PRODUCT$a3000ru","totolink$PRODUCT$a3000ru_firmware","totolink$PRODUCT$a3100r","totolink$PRODUCT$a3100r_firmware","totolink$PRODUCT$a800r","totolink$PRODUCT$a800r_firmware","totolink$PRODUCT$a810r","totolink$PRODUCT$a810r_firmware","totolink$PRODUCT$a830r","totolink$PRODUCT$a830r_firmware","totolink$PRODUCT$a950rg","totolink$PRODUCT$a950rg_firmware"],"removed":[]},"type":"vendors"}],"id":"975c338b-01a6-47be-accb-239c750757b8"}],"cpes":{"data":["cpe:2.3:h:totolink:a3000ru:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a3100r:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a800r:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a810r:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a830r:-:*:*:*:*:*:*:*","cpe:2.3:h:totolink:a950rg:-:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a3000ru_firmware:5.9c.5185_b20201128:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a3100r_firmware:4.1.2cu.5247_b20211129:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a800r_firmware:4.1.2cu.5137_b20200730:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a810r_firmware:4.1.2cu.5182_b20201026:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a830r_firmware:4.1.2cu.5182_b20201102:*:*:*:*:*:*:*","cpe:2.3:o:totolink:a950rg_firmware:4.1.2cu.5161_b20200903:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2025-04-22T00:00:00+00:00","provider":"mitre"},"description":{"data":"TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"provider":"vulnrichment"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.01342},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"yes","Exploitation":"poc","Technical Impact":"total"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://locrian-lightning-dc7.notion.site/CVE-2025-28035-CVE-2025-28036-RCE1-1a98e5e2b1a28081880dd817104b3af4","https://locrian-lightning-dc7.notion.site/RCE1-1a98e5e2b1a28081880dd817104b3af4"],"providers":["mitre","nvd","vulnrichment"]},"title":{"data":null,"provider":null},"updated":{"data":"2025-04-29T16:13:29.720000+00:00","provider":"nvd"},"vendors":{"data":["totolink","totolink$PRODUCT$a3000ru","totolink$PRODUCT$a3000ru_firmware","totolink$PRODUCT$a3100r","totolink$PRODUCT$a3100r_firmware","totolink$PRODUCT$a800r","totolink$PRODUCT$a800r_firmware","totolink$PRODUCT$a810r","totolink$PRODUCT$a810r_firmware","totolink$PRODUCT$a830r","totolink$PRODUCT$a830r_firmware","totolink$PRODUCT$a950rg","totolink$PRODUCT$a950rg_firmware"],"providers":["nvd"]},"weaknesses":{"data":["CWE-78"],"providers":["nvd","vulnrichment"]}},"vulnrichment":{"cpes":[],"created":"2025-04-22T00:00:00+00:00","description":"TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"yes","Exploitation":"poc","Technical Impact":"total"},"version":"2.0.3"}},"references":["https://locrian-lightning-dc7.notion.site/CVE-2025-28035-CVE-2025-28036-RCE1-1a98e5e2b1a28081880dd817104b3af4"],"title":null,"updated":"2025-04-23T14:14:15.818000+00:00","vendors":[],"vulnrichment_repo_path":"2025/28xxx/CVE-2025-28036.json","weaknesses":["CWE-78"]}}