15678 matches found
PT-2025-9130
Name of the Vulnerable Software and Affected Versions TOTOlink A3002R version V1.1.1-B20200824.0128 Description The issue arises from a buffer overflow due to improper input validation of the static gw parameter in the formIpv6Setup interface of the /bin/boa endpoint. Recommendations For TOTOlink...
CVE-2025-25635
The TOTOlink A3002R router, specifically version V1.1.1-B20200824.0128 , is susceptible to a buffer overflow vulnerability within the /bin/boa binary. This flaw is caused by improper input validation of the pppoe_dns1 parameter during the processing of the formIpv6Setup interface, where buffers a...
CVE-2025-25609
The TOTOlink A3002R wireless router, specifically version V1.1.1-B20200824.0128 , is vulnerable to a buffer overflow vulnerability. The root cause is improper input validation of the static_ipv6 parameter within the formIpv6Setup interface of the /bin/boa API endpoint, where the system fails to c...
CVE-2025-25610
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the staticgw parameter in the formIpv6Setup interface of /bin/boa...
CVE-2025-25635: Buffer Copy without Checking Size of Input
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoedns1 parameter in the formIpv6Setup interface of /bin/boa...
CVE-2025-25610: Buffer Copy without Checking Size of Input
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the staticgw parameter in the formIpv6Setup interface of /bin/boa...
mtkwifi.lua Function Command Execution
The vulnerability of the apcliwpsgenpincode function in the mtkwifi.lua script of the TOTOLINK X5000R router’s software is related to the lack of measures taken to secure input data at the control level. Exploiting this vulnerability could allow an attacker to execute arbitrary commands remotely...
TOTOLINK CP450 Router DoS
The vulnerability of the getSaveConfig function in TOTOLINK CP450 router microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the httphost parameter. Exploiting this vulnerability could allow a remote attacker to cause service...
TOTOLINK CP450 Router DoS
The vulnerability of the setPortForwardRules function in TOTOLINK CP450 router microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the comment parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...
TOTOLINK CP450 Router DoS
The vulnerability of the setIpQosRules function in TOTOLINK CP450 router software lies in the issue of the operation exceeding the buffer in memory when processing the comment parameter. Exploiting this vulnerability could allow an attacker to cause service interruptions...
CloudACMunualUpdate Heap Buffer Overflow DoS
The vulnerability of the CloudACMunualUpdate function in the microprogramming software for TOTOLINK CP450 routers is related to the issue of the operation going beyond the buffer in memory when processing the FileName parameter. Exploiting this vulnerability could allow a malicious actor to cause...
TOTOLINK CP450 Router DoS
The vulnerability of the setUrlFilterRules function in TOTOLINK CP450 router microprogramming software is related to the issue of the operation exceeding the buffer in memory when processing the url parameter. Exploiting this vulnerability could allow a malicious actor to cause service...
TOTOLINK X5000R apcli_wps_gen_pincode Command Injection Vulnerability
The TOTOLINK X5000R is a router product from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability that originates from the apcliwpsgenpincode function, no details of the vulnerability are provided at this time...
TOTOLINK X5000R vif_disable Command Injection Vulnerability
The TOTOLINK X5000R is a router product from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability that originates from the vifdisable function, no details of the vulnerability are provided at this time...
Totolink CP450 Router Code Execution
The vulnerability of the setIpPortFilterRules function in the Totolink CP450 router software lies in the reading of data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted POST request...
CVE-2025-25605
Totolink X5000R V9.1.0u.6369B20230113 is vulnerable to command injection via the apcliwpsgenpincode function in mtkwifi.lua...
CVE-2025-25604
Totolink X5000R V9.1.0u.6369B20230113 is vulnerable to command injection via the vifdisable function in mtkwifi.lua...
CVE-2025-25605
Totolink X5000R V9.1.0u.6369B20230113 is vulnerable to command injection via the apcliwpsgenpincode function in mtkwifi.lua...
