VulnSocial

CVE-2020-25499Active Exploitation(totolink / a3002r)

MEDIUMCVSS 8.8 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for totolink a3002r systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router.

totolink CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Weakness type (CWE)
CWE-78CWE-862

Priority

MEDIUM

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • a3002r
  • a3002r_firmware
  • a3002ru-v1
  • a3002ru-v1_firmware

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
totolink
Products
a3002ra3002r_firmwarea3002ru-v1a3002ru-v1_firmwarea3002ru-v2a3002ru-v2_firmwarea702r-v2a702r-v2_firmwarea702r-v3a702r-v3_firmware

1 version affected across 26 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-04-12: 1Active Exploitation · 2026-04-12: 1Technical Details · 2026-04-12: 104-12
Signal classification1 categories
Active Exploitation
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CTIWatch@ctiwatchcloud
    Active Exploitation

    🚨 [HIGH] Active exploitation detected: CVE-2020-25499 Exploit in the wild confirmed for CVE-2020-25499 (CVSS null). TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the s... 🔗 http://ctiwatch.cloud/alerts #ZeroDay #ExploitInWild #CyberSecurity

    Post summary

    CVE-2020-25499 is actively exploited in the wild, targeting TOTOLINK A3002RU devices and allowing authenticated remote users to modify system settings.

    00000107
    5.6K followersView on X
CPE platform detail26 entries

26 of 26 entries

PartVendorProductVersionTarget SWTarget HW
HWtotolinka3002r---
OStotolinka3002r_firmware---
HWtotolinka3002ru-v1---
OStotolinka3002ru-v1_firmware---
HWtotolinka3002ru-v2---
OStotolinka3002ru-v2_firmware---
HWtotolinka702r-v2---
OStotolinka702r-v2_firmware---
HWtotolinka702r-v3---
OStotolinka702r-v3_firmware---
HWtotolinkn100re-v3---
OStotolinkn100re-v3_firmware---
HWtotolinkn150rt---
OStotolinkn150rt_firmware---
HWtotolinkn200re-v3---
OStotolinkn200re-v3_firmware---
HWtotolinkn200re-v4---
OStotolinkn200re-v4_firmware---
HWtotolinkn210re---
OStotolinkn210re_firmware---
HWtotolinkn300rh-v3---
OStotolinkn300rh-v3_firmware---
HWtotolinkn300rt---
OStotolinkn300rt_firmware---
HWtotolinkn302r_plus---
OStotolinkn302r_plus_firmware---

Explore more

Back to dashboardtotolink CVEsa3002r vulnerabilities