Vulnerability · Published Aug 14, 2025 · Assigned by VulDB
CVE-2025-8938TOTOLINK N350R Telnet Service formSysTel backdoor
Medium 6.3
In plain English
A medium-severity security flaw in N350R from TOTOLINK. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.4%top 70.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability was found in TOTOLINK N350R 1.2.3-B20130826. This issue affects the function formSysTel of the file /boafrm/formSysTel of the component Telnet Service. The manipulation of the argument TelEnabled leads to backdoor. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
Weakness: CWE-912 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:W/RC:R
References
- VDB-319901 | TOTOLINK N350R Telnet Service formSysTel backdoor vdb-entry, technical-description
- VDB-319901 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #631837 | TOOLINK N350R V1.2.3-B20130826 Backdoor third-party-advisory
- https://github.com/rew1X/CVE/blob/main/TOTOLINK/formSysTel/formSysTel.md related
- https://github.com/rew1X/CVE/blob/main/TOTOLINK/formSysTel/formSysTel.md#poc exploit
- https://www.totolink.net/ product