Loading vulnerability…
Pre-auth RCE in TOTOLINK A810R setNoticeCfg
CVE-2025-28137 is a pre-authentication remote command execution vulnerability in TOTOLINK A810R firmware version V4.1.2cu.5182_B20201026. The flaw is present in the setNoticeCfg function and is triggered through the NoticeUrl parameter. Insufficient validation or sanitization of attacker-controlled input allows crafted requests to inject and execute operating system commands before authentication, exposing the device’s underlying system to remote compromise.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows an unauthenticated remote attacker to execute arbitrary commands on the affected router. This can result in full device compromise, malware or botnet deployment, configuration tampering, traffic interception or redirection, persistence, and use of the device as a pivot, proxy, or distributed denial-of-service node.
If you can’t patch tonight, do this now.
Restrict access to the device management interface to trusted internal networks only, disable WAN-side administration, and place the device behind upstream filtering or firewall rules that prevent untrusted access to the vulnerable endpoint. Monitor for signs of compromise and reimage or factory-reset affected devices before redeployment if exploitation is suspected.
Patch, then assume compromise.
Upgrade the affected TOTOLINK A810R firmware to a vendor-fixed release if one is available. If no patched firmware is available, replace the device with a supported model receiving security updates. Validate that remote management and any exposed administrative interfaces are not reachable from untrusted networks after remediation.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
9 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.