Buffer Overflow Vulnerability in TOTOLINK Routers
CVE-2025-28025
7.3HIGH
Summary
Certain TOTOLINK router models contain a vulnerability in the downloadFile.cgi component, specifically related to the handling of the v14 parameter. This buffer overflow flaw could potentially allow an attacker to execute arbitrary code or crash the device, posing a significant security risk to users relying on these routers for their network connectivity.
References
CVSS V3.1
Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved