Buffer Overflow Vulnerability in TOTOLINK X15 HTTP POST Handler

CVE-2025-5734

What is CVE-2025-5734?

A buffer overflow vulnerability has been identified in the TOTOLINK X15 device, specifically within the HTTP POST request handler located in the /boafrm/formWlanRedirect file. Malicious actors can manipulate the 'redirect-url' argument, which may lead to a remote exploitation of the device. This situation poses significant security risks, as attackers could potentially achieve unauthorized access or disruption of service. Users are strongly advised to apply relevant updates and patches released by TOTOLINK to mitigate the risks associated with this vulnerability.

References