PT-2025-21031 · Totolink · Totolink A3002Ru

CVE-2025-45865

·

Published

2025-04-18

·

Updated

2025-05-13

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404
Description: A buffer overflow issue was discovered via the dnsaddr parameter in the "formDhcpv6s" interface.
Recommendations: For TOTOLINK A3002R version 4.0.0-B20230531.1404, avoid using the dnsaddr parameter in the "formDhcpv6s" interface until the issue is resolved.

Exploit

Fix

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2025-05765
CVE-2025-45865

Affected Products

Totolink A3002Ru