CVE-2025-28022

TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.

Score

CVSS 3.1 7.3 High

Status

Analyzed - cve@mitre.org

Published

2025-04-23

Last modified

2025-04-24

Weaknesses

CWE-120

Affected products

• A810r Firmware (Totolink)

References

• https://locrian-lightning-dc7.notion.site/BufferOverflow3-1948e5e2b1a280ec8061ed308b33b5bc?pvs=73
• https://locrian-lightning-dc7.notion.site/CVE-2025-28022-BufferOverflow3-1948e5e2b1a280ec8061ed308b33b5bc