Buffer Overflow in TOTOLINK Routers Affecting Multiple Models

CVE-2025-28028

What is CVE-2025-28028?

TOTOLINK routers A830R, A950RG, A3000RU, and A3100R exhibit a buffer overflow vulnerability in the downloadFile.cgi script through the v5 parameter. This flaw could allow malicious actors to exploit the routers, potentially leading to unauthorized access or further attacks. Users of affected models are urged to assess their network security and apply available updates to mitigate the risks associated with this vulnerability.

References