CVE:CVE-2020-25499
CNNVD:CNNVD-202012-763
TotoLink A3002RU是中国台湾吉翁电子（TotoLink）公司的一款无线路由器产品。
TotoLink A3002RU-V2.0.0 B20190814.1034 存在命令注入漏洞，该漏洞允许通过身份验证的远程用户修改系统的“运行命令”。攻击者可利用该漏洞可以使用此功能在路由器上执行任意OS命令。
solution:Upgrade totolink a3002r_firmware to a higher version than 1.1.1-b20200824.0128,and avoid the version (,1.1.1-b20200824.0128); Upgrade totolink a3002ru-v1_firmware to a higher version than 3.4.0-b20201030.1754,and avoid the version (,3.4.0-b20201030.1754); Upgrade totolink a3002ru-v2_firmware to a higher version than 2.1.1-b20200911.1756,and avoid the version (,2.1.1-b20200911.1756); Upgrade totolink a702r-v2_firmware to a higher version than 1.0.0-b20201028.1743,and avoid the version (,1.0.0-b20201028.1743); Upgrade totolink a702r-v3_firmware to a higher version than 1.0.0-b20201103.1713,and avoid the version (,1.0.0-b20201103.1713); Upgrade totolink n100re-v3_firmware to a higher version than 3.4.0-b20201030.0926,and avoid the version (,3.4.0-b20201030.0926); Upgrade totolink n150rt_firmware to a higher version than 3.4.0-b20201030.1142,and avoid the version (,3.4.0-b20201030.1142); Upgrade totolink n200re-v3_firmware to a higher version than 3.4.0-b20201029.1811,and avoid the version (,3.4.0-b20201029.1811); Upgrade totolink n200re-v4_firmware to a higher version than 4.0.0-b20200805.1507,and avoid the version (,4.0.0-b20200805.1507); Upgrade totolink n210re_firmware to a higher version than 1.0.0-b20201030.2030,and avoid the version (,1.0.0-b20201030.2030); Upgrade totolink n300rh-v3_firmware to a higher version than 3.2.4-b20201029.1838,and avoid the version (,3.2.4-b20201029.1838); Upgrade totolink n300rt_firmware to a higher version than 3.4.0-b20201026.2033,and avoid the version (,3.4.0-b20201026.2033); Upgrade totolink n302r_plus_firmware to a higher version than 3.4.0-b20201028.2224,and avoid the version (,3.4.0-b20201028.2224)