CVE-2025-3990 TOTOLINK N150RT formVlan buffer overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this issue is some unknown functionality of the file /boafrm/formVlan. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The...

CVE-2025-3990 TOTOLINK N150RT formVlan buffer overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this issue is some unknown functionality of the file /boafrm/formVlan. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The...

CVE-2025-3990

CVE-2025-3990 affects TOTOLINK N150RT 3.4.0-B20190525. The vulnerability is in the /boafrm/formVlan endpoint, where manipulating the submit-url parameter can cause a buffer overflow. This may be exploitable remotely and, per multiple sources, has been disclosed publicly. Documented impact include...

CVE-2025-3989 TOTOLINK N150RT formStaticDHCP buffer overflow

A vulnerability classified as critical was found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this vulnerability is an unknown functionality of the file /boafrm/formStaticDHCP. The manipulation of the argument Hostname leads to buffer overflow. The attack can be launched remotely. The exploit...

CVE-2025-3989

The CVE-2025-3989 entry applies to TOTOLINK N150RT (version 3.4.0-B20190525). The vulnerability affects the /boafrm/formStaticDHCP path, where the Hostname parameter can be manipulated to cause a buffer overflow. This is a remotely exploitable vulnerability with public exploit availability. The t...

CVE-2025-3989 TOTOLINK N150RT formStaticDHCP buffer overflow

A vulnerability classified as critical was found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this vulnerability is an unknown functionality of the file /boafrm/formStaticDHCP. The manipulation of the argument Hostname leads to buffer overflow. The attack can be launched remotely. The exploit...

CVE-2025-3988

A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected is an unknown function of the file /boafrm/formPortFw. The manipulation of the argument servicetype leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-3988

A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected is an unknown function of the file /boafrm/formPortFw. The manipulation of the argument servicetype leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-3987

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to command injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-3987

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to command injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-3988 TOTOLINK N150RT formPortFw buffer overflow

A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected is an unknown function of the file /boafrm/formPortFw. The manipulation of the argument servicetype leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-3988 TOTOLINK N150RT formPortFw buffer overflow

A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected is an unknown function of the file /boafrm/formPortFw. The manipulation of the argument servicetype leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-3988

CVE-2025-3988 affects TOTOLINK N150RT (3.4.0-B20190525). A vulnerability in an unknown function within the file /boafrm/formPortFw allows manipulation of the argument service_type , causing a buffer overflow. This enables a remote attacker to execute arbitrary code or crash the device, with publi...

CVE-2025-3987 TOTOLINK N150RT formWsc command injection

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to command injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-3987 TOTOLINK N150RT formWsc command injection

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to command injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-3987

CVE-2025-3987 affects TOTOLINK N150RT 3.4.0-B20190525. The vulnerability is a command injection in the /boafrm/formWsc endpoint caused by unsafely handling the localPin parameter. Remote attacker could exploit this to execute arbitrary commands with low privileges; exploit has been publicly discl...

TOTOLINK A950RG NoticeUrl Parameter Arbitrary Command Execution Vulnerability

TOTOLINK A950RG is a gaming router and smart router that supports 2.4GHz and 5GHz dual band. The TOTOLINK A950RG suffers from a command execution vulnerability that originates from the NoticeUrl parameter in the setNoticeCfg function, which can be exploited by an attacker to execute arbitrary...

CVE-2025-3987: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to command injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-3990: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this issue is some unknown functionality of the file /boafrm/formVlan. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The...

TOTOLINK N150RT security vulnerabilities

The TOTOLINK N150RT is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N150RT suffers from a buffer overflow vulnerability that originates from the parameter servicetype in the file /boafrm/formPortFw that fails to properly validate the length of the input data, which can b...