Skip to main content
ExploitPublished

TOTOLINK N300RB 8.54 · Command Execution

Source Exploit-DB RSS Feed

0

Mentioned vulnerabilities

Severity
Medium

Rated by Threat Radar

Data as of 14 Aug 2025, 01:13 UTC

What to do

AI-suggested

European organizations should immediately inventory their network devices to identify any TOTOLINK N300RB routers running firmware version 8.54. 2) Change default credentials and ensure strong, unique passwords are used to reduce the risk of unauthorized authentication. 3) Segment the network to isolate vulnerable devices from critical systems and sensitive data. 4) Monitor network traffic for unusual command execution patterns or unauthorized access attempts targeting the router. 5) Where possible, replace affected devices with models from vendors that provide timely security updates and have a stronger security posture. 6) Engage with TOTOLINK support channels to request firmware updates or official patches addressing this vulnerability. 7) Implement network-level protections such as firewall rules to restrict access to router management interfaces only to trusted internal IP addresses.

Description

TOTOLINK N300RB 8.54 - Command Execution

Indicators of compromise

Exploit source code

Exploit code for TOTOLINK N300RB 8.54 - Command Execution489 characters
# Title: TOTOLINK N300RB 8.54 - Command Execution
# Author: Skander BELABED - Magellan Sécurité
# Date: 07/11/2025
# Vendor: TOTOLINK
# Product: N300RB
# Firmware version: 8.54
# CVE: CVE-2025-52089

## Description:
A hidden remote support feature protected by a static secret in TOTOLINK
N300RB firmware version 8.54 allows an authenticated attacker to execute
arbitrary OS commands with root privileges.

# Reproduce:
[href](
https://0x09.dev/posts/toto_decouvre_une_interface_de_debug/)

References

Community reviews

Loading reviews…