CVE-2025-5734

A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Score
CVSS 3.1 8.8 High
Status
Analyzed - cna@vuldb.com
Published
2025-06-06
Last modified
2025-06-09
Weaknesses
CWE-119, CWE-120

Affected products

References