Buffer Overflow Vulnerability in TOTOLINK Routers

CVE-2025-4825

What is CVE-2025-4825?

A critical vulnerability has been identified within various TOTOLINK router models, specifically affecting the HTTP POST Request Handler component. The issue arises from improper handling of the 'submit-url' argument within the file /boafrm/formDMZ, leading to a buffer overflow situation. This vulnerability can be exploited remotely, allowing attackers to manipulate the affected routers, potentially compromising the integrity and security of the network. It is crucial for users of these affected models to monitor for any signs of exploit attempts and ensure timely mitigation.

References