Buffer Overflow Vulnerability in TOTOLINK A810R Router

CVE-2025-28022

Summary

The TOTOLINK A810R router is susceptible to a buffer overflow vulnerability via the downloadFile.cgi interface. This vulnerability is triggered through an improper handling of the v25 parameter, which can potentially allow unauthorized access and manipulation of the device's memory. If exploited, this security flaw could compromise network integrity, expose sensitive data, and allow malicious actors to execute arbitrary code on the device.

References