CVE-2022-25075

PoC —

CVSS 3.1

9.8 critical

EPSS

56%p99

Published

Feb 24, 2022 (Feb 24, 2022)

Modified

Jun 17, 2026

Description

TOTOLink A3000RU V5.9c.2280_B20180512 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.

Vendors: totolink
Products: a3000ru firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (56.2%)

In the news6 stories

Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, Cross

Palo Alto Unit 42Jun 5, 20:05 UTC · Jun 5, 2024Vulnerability in the wildCVE-2022-22954 CVE-2022-22963 CVE-2022-22965+20 CVEs

CVE-2022-25075

In the news6 stories

Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, Cross

EnemyBot malware adds new exploits to target CMS servers and Android devices

EnemyBot Linux Botnet Now Exploits Web Server, Android and CMS Vulnerabilities

Enemybot, a new DDoS botnet appears in the threat landscape

Beastmode DDoS Botnet Exploiting New TOTOLINK Bugs to Enslave More Routers

Beastmode Mirai botnet now includes exploits for Totolink routers