| Title | TOTOLINK N150RT V3.4.0-B20190525 Command Injection |
|---|
| Description | TOTOLINK N150RT V2_Firmware V3.4.0-B20190525 was discovered to contain a remote code execution (RCE) vulnerability via the localPin parameter in the /boafrm/formWsc. |
|---|
| Source | ⚠️ https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/RCE_formWsc |
|---|
| User | lcyf-fizz (UID 82520) |
|---|
| Submission | 04/15/2025 03:49 (1 Year ago) |
|---|
| Moderation | 04/26/2025 10:16 (11 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 306323 [TOTOLINK N150RT 3.4.0-B20190525 /boafrm/formWsc localPin command injection] |
|---|
| Points | 16 |
|---|