Pre-auth Buffer Overflow Vulnerability in TOTOLINK Routers

CVE-2025-28032

Summary

TOTOLINK routers including models A800R, A810R, A830R, A950RG, A3000RU, and A3100R are susceptible to a pre-authentication buffer overflow vulnerability originating from the setNoticeCfg function via the IpForm parameter. This vulnerability could allow an attacker to execute arbitrary code, compromising the affected devices and potentially leading to unauthorized access or network disruption. It is crucial for users to apply necessary security patches promptly and consider securing their network settings to mitigate potential risks.

References