Authenticated Stack Overflow in TOTOLINK NR1800X Router
CVE-2025-45841

9.8CRITICAL

Key Information:

Vendor

TOTOLINK
Status
NR1800X Router
Vendor
CVE Published:
8 May 2025

What is CVE-2025-45841?

An authenticated stack overflow was identified in the TOTOLINK NR1800X router. The vulnerability arises through the text parameter within the setSmsCfg function, which could potentially allow attackers to manipulate memory and execute arbitrary code. Proper security measures are essential to protect against unauthorized access and exploitation.

References

https://www.totolink.net/
https://github.com/regainer27/CVE-key/blob/main/bo1/READM...
https://www.totolink.net/home/menu/detail/menu_listtpl/do...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.