Buffer Overflow in TOTOLINK A810R Router Software
CVE-2025-28030

8.8HIGH

Key Information:

Vendor
TOTOLINK
Status
A810R Router
Vendor
CVE Published:
22 April 2025

Summary

The TOTOLINK A810R router software is susceptible to a stack overflow vulnerability through the handling of the startTime and endTime parameters in the setParentalRules function. This flaw could potentially allow attackers to exploit the router's configuration settings, potentially leading to unauthorized access or other security issues. It is crucial for users of the affected software version to apply available security patches and review their configurations to mitigate risks.

References

https://locrian-lightning-dc7.notion.site/BufferOverflow6...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.