Detections
Analytics
CVE-2025-52089
high
Description
A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authenticated attacker to execute arbitrary OS commands with root privileges.
References
https://www.bitsight.com/blog/rondodox-botnet-infrastructure-analysis
https://0x09.dev/posts/toto_decouvre_une_interface_de_debug/