Which versions of TOTOLINK N150RT are affected by CVE-2025-6299?

Organizations using A vulnerability classified as critical should be aware of moderate risk from CVE-2025-6299, a command injection vulnerability rated CVSS 4.7.

Is there a public PoC exploit available for CVE-2025-6299?

Yes, a public proof-of-concept exploit is available for CVE-2025-6299. Prioritise patching immediately. EPSS: 1.7%.

How to fix or mitigate CVE-2025-6299?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Validate input sanitization for user-controlled parameters.

TOTOLINK N150RT CVE-2025-6299

Q: What is the CVSS score of CVE-2025-6299?

CVE-2025-6299 has a CVSS 4.0 base score of 2.0 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 1.7%.

EUVD-2025-28714 LOW

Command Injection (CWE-77)

2025-06-20 cna@vuldb.com

Command Injection N150rt Firmware

2.0

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.0 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

4.7 MEDIUM

PR:H due to admin access required; low impact on confidentiality, integrity, availability.

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

4.7 (MEDIUM) 2.0 (LOW)

EUVD ID Assigned

Mar 15, 2026 - 00:19 euvd

EUVD-2025-28714

Analysis Generated

Mar 15, 2026 - 00:19 vuln.today

PoC Detected

Jul 02, 2025 - 18:53 vuln.today

Public exploit code

CVE Published

Jun 20, 2025 - 03:15 nvd

MEDIUM 4.7

CVE Published

Jun 20, 2025 - 03:15 cve.org

LOW 2.0

DescriptionCVE.org

A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boa/formWSC. The manipulation of the argument targetAPSsid leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

OS command injection in TOTOLINK N150RT firmware 3.4.0-B20190525 allows remote authenticated attackers to execute arbitrary commands via the targetAPSsid parameter in /boa/formWSC. Public exploit code is available, and EPSS score of 1.65% (82nd percentile) indicates moderate exploitation likelihood, though no active exploitation in CISA KEV has been reported.

Technical ContextAI

The vulnerability resides in the /boa/formWSC endpoint of the TOTOLINK N150RT router's web interface. The 'targetAPSsid' parameter is passed to a system command without proper sanitization, leading to OS command injection (CWE-77). The affected product is a consumer-grade router running firmware version 3.4.0-B20190525, identified by CPE cpe:2.3:o:totolink:n150rt_firmware:3.4.0-b20190525:*:*:*:*:*:*:*.

RemediationAI

No vendor-released patch identified at time of analysis. As a workaround, restrict access to the router's web interface to trusted networks only, disable remote management if not required, and monitor logs for suspicious activity. Consider replacing the device if no firmware update becomes available.