CVE-2025-25609

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_ipv6 parameter in the formIpv6Setup interface of /bin/boa

Score

CVSS 3.1 8.0 High

Status

Analyzed - cve@mitre.org

Published

2025-02-28

Last modified

2025-03-05

Weaknesses

CWE-120

Affected products

• A3002r Firmware (Totolink)

References

• https://github.com/SunnyYANGyaya/firmcrosser/blob/main/ToTolink/TOTOLINK-A3002R-formIpv6Setup-static_ipv6.md