Buffer Overflow Vulnerability in TOTOLINK A810R Firmware
CVE-2025-28021

7.3HIGH

Key Information:

Vendor

TOTOLINK
Status
A810R
Vendor
CVE Published:
23 April 2025

What is CVE-2025-28021?

A buffer overflow vulnerability has been identified in the TOTOLINK A810R firmware, specifically in the downloadFile.cgi file. This vulnerability is triggered through the use of the v14 and v3 parameters, which could allow an attacker to execute arbitrary code or cause unexpected behavior, potentially leading to unauthorized access or system instability.

References

https://locrian-lightning-dc7.notion.site/BufferOverflow1...
https://locrian-lightning-dc7.notion.site/CVE-2025-28021-...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.