Buffer Overflow Vulnerability in TOTOLINK N302R Plus Routers
CVE-2025-5672

8.7HIGH

Key Information:

Vendor

Totolink
Status
N302r Plus
Vendor
CVE Published:
5 June 2025

What is CVE-2025-5672?

The TOTOLINK N302R Plus router is impacted by a buffer overflow vulnerability within the HTTP POST Request Handler, specifically in the /boafrm/formFilter component. This weakness allows an attacker to manipulate the 'url' argument, potentially leading to remote code execution. The vulnerability has been publicly disclosed, making affected devices susceptible to exploitation, emphasizing the need for immediate remediation.

Affected Version(s)

N302R Plus 3.4.0-B20201028

References

https://vuldb.com/?id.311161
vdb-entrytechnical-description
https://vuldb.com/?ctiid.311161
signaturepermissions-required
https://vuldb.com/?submit.590094
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

wanglun_ (VulDB User)
.
CVE-2025-5672 : Buffer Overflow Vulnerability in TOTOLINK N302R Plus Routers