Buffer Overflow Vulnerability in TOTOLINK N302R Plus due to HTTP POST Request Manipulation

CVE-2025-5671

What is CVE-2025-5671?

A buffer overflow vulnerability exists in the TOTOLINK N302R Plus, specifically within the /boafrm/formPortFw component that processes HTTP POST requests. The flaw arises from improper handling of the 'service_type' argument, allowing an attacker to exploit this weakness remotely. Successful exploitation could lead to unauthorized access or control over the device, posing significant security risks to affected users. It is crucial to apply necessary updates and monitor for signs of exploitation.

References