{
  "cvss": 0.0,
  "datePublished": "2026-01-22T00:00:00Z",
  "dateUpdated": "2026-01-22T00:00:00Z",
  "description": "A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been classified as critical. This affects the function formWlSiteSurvey of the file /boafrm/formWlSiteSurvey. The manipulation of the argument wlanif leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
  "dueDate": "",
  "id": "CVE-2025-6485",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "a3002r_firmware",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "TOTOLINK a3002r_firmware Improper Neutralization of Special Elements used in a Command",
  "vendor": "TOTOLINK"
}