CVE-2025-45843

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function...

CVE-2025-45789

TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules...

TOTOLINK NR1800X 安全漏洞

TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's Gion Electronics TOTOLINK. The TOTOLINK NR1800X suffers from a buffer overflow vulnerability that stems from the ssid parameter in the setWiFiGuestCfg function failing to properly validate the length size of the input...

CVE-2025-45844

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function...

CVE-2025-45788

CVE-2025-45788 affects TOTOLINK A3100R (V5.9c.1527). The setMacFilterRules function is vulnerable to a buffer overflow triggered via the comment parameter, due to inadequate input length validation. Impact as per NVD: CVSS v3.1 base score 9.8 (CRITICAL) with network attack, no user interaction, a...

CVE-2025-45844

CVE-2025-45844 affects the TOTOLINK NR1800X, specifically firmware version 9.1.0u.6681_B20230703. The vulnerability is an authenticated stack/ buffer overflow in the setWiFiBasicCfg function, triggered by a crafted ssid parameter that fails to validate input length, enabling arbitrary code execut...

CVE-2025-45843

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function...

CVE-2025-45842

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function...

CVE-2025-45797

TOTOlink A950RG V4.1.2cu.5204B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cstemodules/system.so...

CVE-2025-45798

A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204B20210112. The vulnerability is located in the setNoticeCfg interface within the /lib/cstemodules/system.so library, specifically in the processing of the IpTo parameter...

CVE-2025-45798

A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204B20210112. The vulnerability is located in the setNoticeCfg interface within the /lib/cstemodules/system.so library, specifically in the processing of the IpTo parameter...

CVE-2025-45842

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function...

CVE-2025-45841

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function...

CVE-2025-45787

TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules...

CVE-2025-45797

CVE-2025-45797 affects TOTOLINK A950RG (V4.1.2cu.5204_B20210112). The vulnerability is a buffer overflow in the setNoticeCfg interface’s NoticeUrl parameter validation within /lib/cste_modules/system.so, due to improper input length handling. Public sources describe potential arbitrary code execu...

CVE-2025-45790

TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cstemodules/firewall.so...

CVE-2025-45788

TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules...

PT-2025-20420 · Totolink · Totolink A950Rg

Name of the Vulnerable Software and Affected Versions: TOTOlink A950RG version 4.1.2cu.5204 B20210112 Description: The issue arises from improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of the /lib/cste modules/system.so module. This leads to a buffer overflow...

PT-2025-20390 · Totolink · Totolink Nr1800X

Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6681 B20230703 Description: The issue is an authenticated stack overflow that occurs via the text parameter in the setSmsCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK NR180...

CVE-2025-45845

CVE-2025-45845 affects TOTOLINK NR1800X (v9.1.0u.6681_B20230703). An authenticated stack overflow via the ssid5g parameter in setWiFiEasyGuestCfg is reported, with potential arbitrary code execution or denial of service. Public sources corroborate the component and root cause; PT-Security additio...