CVE-2025-6149

CVE-2025-6149 affects TOTOLINK A3002R (version 4.0.0-B20230531.1404). The vulnerability resides in the HTTP POST Request Handler’s /boafrm/formSysLog, where manipulation of the submit-url argument can cause a buffer overflow. Exploitation is described as remote and publicly disclosed, with report...

CVE-2025-6149 TOTOLINK A3002R HTTP POST Request formSysLog buffer overflow

A vulnerability classified as critical has been found in TOTOLINK A3002R 4.0.0-B20230531.1404. Affected is an unknown function of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch...

CVE-2025-6149 TOTOLINK A3002R HTTP POST Request formSysLog buffer overflow

A vulnerability classified as critical has been found in TOTOLINK A3002R 4.0.0-B20230531.1404. Affected is an unknown function of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch...

CVE-2025-6146

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. This affects an unknown part of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to...

CVE-2025-6146

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. This affects an unknown part of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to...

CVE-2025-6148 TOTOLINK A3002RU HTTP POST Request formSysLog buffer overflow

A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack...

CVE-2025-6148

TOTOLINK A3002RU (version 3.0.0-B20230809.1615) contains a buffer overflow in the HTTP POST Request Handler’s /boafrm/formSysLog when processing the submit-url argument. CVE-2025-6148 is rated high/critical with remote exploitability. Several sources confirm that the vulnerability can be triggere...

CVE-2025-6148 TOTOLINK A3002RU HTTP POST Request formSysLog buffer overflow

A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack...

CVE-2025-6147

CVE-2025-6147 affects TOTOLINK A702R firmware 4.0.0-B20230721.1521. The vulnerability resides in the HTTP POST Request Handler’s file path /boafrm/formSysLog, where manipulating the submit-url argument can cause a buffer overflow. It is remotely exploitable and, according to the CVE metrics, the ...

CVE-2025-6147 TOTOLINK A702R HTTP POST Request formSysLog buffer overflow

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack c...

CVE-2025-6147 TOTOLINK A702R HTTP POST Request formSysLog buffer overflow

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack c...

TOTOLINK A3002R 安全漏洞

TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R version 4.0.0-B20230531.1404 suffers from a buffer overflow vulnerability, which originates from the failure of the submit-url parameter in the /boafrm/formSysLog file to correctly validate the length...

TOTOLINK A3002RU 安全漏洞

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. The TOTOLINK A3002RU version 3.0.0-B20230809.1615 suffers from a buffer overflow vulnerability, which originates from the failure of the submit-url parameter in the /boafrm/formSysLog file to correctly validate...

TOTOLINK EX1200T /boafrm/formIpQoS file buffer overflow vulnerability

The TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1200T suffers from a buffer overflow vulnerability that originates from the failure of the file /boafrm/formIpQoS in the HTTP POST Request Handler component to properly validate the length and si...

TOTOLINK EX1200T /boafrm/formDMZ File Buffer Overflow Vulnerability

The TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1200T suffers from a buffer overflow vulnerability that originates from the failure of the file /boafrm/formDMZ in the HTTP POST Request Handler component to properly validate the length and size...

PT-2025-25622 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically affecting the /boafrm/formMultiAP file. The manipulation of the submit-url argument leads to a...

TOTOLINK X15 安全漏洞

TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. TOTOLINK X15 version 1.0.0-B20230714.1105 suffers from a buffer overflow vulnerability, which originates from the parameter submit-url in the file /boafrm/formTmultiAP in the HTTP POST Request Handler component...

TOTOLINK A3002RU 安全漏洞

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK A3002RU version 3.0.0-B20230809.1615, which originates from a failure of the parameter submit-url in the file /boafrm/formMultiAP in the HTTP POST Request...

TOTOLINK EX1200T 安全漏洞

TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK EX1200T version 4.1.2cu.5232B20210713, which originates from the parameter submit-url of the file /boafrm/formMultiAP in the HTTP POST Request Handler componen...

TOTOLINK X15 安全漏洞

TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK X15 version 1.0.0-B20230714.1105, which originates from the submit-url parameter in the /boafrm/formMultiAP file failing to correctly validate the length and size...