CVE-2025-3996

Name of the Vulnerable Software and Affected Versions TOTOLINK N150RT version 3.4.0-B20190525

Description A vulnerability was found in the MAC Filtering Page component of the TOTOLINK N150RT router, affecting some unknown functionality of the file /home.htm. The manipulation of the Comment argument leads to cross-site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Recommendations As a temporary workaround, consider disabling the MAC Filtering Page component until a patch is available. Restrict access to the /home.htm file to minimize the risk of exploitation. Avoid using the Comment argument in the MAC Filtering Page until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.