PT-2025-22137 · Totolink · Totolink A3002Ru

CVE-2025-45862

·

Published

2025-05-20

·

Updated

2025-05-24

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions TOTOLINK A3002R version 4.0.0-B20230531.1404
Description A buffer overflow issue was discovered in the TOTOLINK A3002R via the interfacenameds parameter in the "formDhcpv6s" interface. This issue can be exploited, potentially leading to unintended consequences.
Recommendations For TOTOLINK A3002R version 4.0.0-B20230531.1404, consider restricting access to the "formDhcpv6s" interface to minimize the risk of exploitation. Avoid using the interfacenameds parameter in this interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-05840
CVE-2025-45862

Affected Products

Totolink A3002Ru