Command Injection Vulnerability in TOTOLINK N300RH Router

CVE-2025-4849

What is CVE-2025-4849?

The TOTOLINK N300RH router is susceptible to a command injection vulnerability through the CloudACMunualUpdateUserdata function in the file /cgi-bin/cstecgi.cgi. Attackers can exploit this flaw remotely by manipulating the 'url' argument, potentially leading to unauthorized command execution on the device. This vulnerability poses a significant threat as it can be exploited by malicious parties without physical access to the affected router.

References