CVE-2025-28256

Name of the Vulnerable Software and Affected Versions TOTOLINK A3100R version 4.1.2cu.5247 B20211129

Description An issue in TOTOLINK A3100R allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file /lib/cste modules/wireless.so.

Recommendations As a temporary workaround, consider disabling the setWebWlanIdx function until a patch is available. Restrict access to the /lib/cste modules/wireless.so file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.