CVE-2025-52089

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-52089
A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authenticated attacker to execute arbitrary OS commands with root privileges.
CVSS

No CVSS.

References
Link Resource
https://0x09.dev/posts/toto_decouvre_une_interface_de_debug/ Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:totolink:n300rb_firmware:8.54:*:*:*:*:*:*:*
cpe:2.3:h:totolink:n300rb:-:*:*:*:*:*:*:*
History

19 Jul 2025, 03:15

Type Values Removed Values Added
References
  • {'url': 'http://totolink.com', 'name': 'http://totolink.com', 'tags': ['Broken Link'], 'refsource': ''}
  • {'url': 'http://n300rb.com', 'name': 'http://n300rb.com', 'tags': ['Broken Link'], 'refsource': ''}

18 Jul 2025, 19:07

Type Values Removed Values Added
CPE cpe:2.3:h:totolink:n300rb:-:*:*:*:*:*:*:*
cpe:2.3:o:totolink:n300rb_firmware:8.54:*:*:*:*:*:*:*
First Time Totolink
Totolink n300rb
Totolink n300rb Firmware
References () http://totolink.com - () http://totolink.com - Broken Link
References () https://0x09.dev/posts/toto_decouvre_une_interface_de_debug/ - () https://0x09.dev/posts/toto_decouvre_une_interface_de_debug/ - Exploit, Third Party Advisory
References () http://n300rb.com - () http://n300rb.com - Broken Link

11 Jul 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-11 15:15

Updated : 2025-07-19 03:15

NVD link : CVE-2025-52089

Mitre link : CVE-2025-52089

JSON object : View

Products Affected

totolink

  • n300rb_firmware
  • n300rb
CWE

No CWE.