PT-2025-9129
CVE-2025-25609
·
Published
2025-02-28
·
Updated
2025-03-02
Description by
CVSS 3.1
8.0
HighMetricsAV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
TOTOlink A3002R version V1.1.1-B20200824.0128
Description
The issue arises from a buffer overflow due to improper input validation of the
static ipv6 parameter in the formIpv6Setup interface of the /bin/boa API endpoint.Recommendations
For version V1.1.1-B20200824.0128, as a temporary workaround, consider restricting access to the
formIpv6Setup interface in the /bin/boa API endpoint until a patch is available. Avoid using the static ipv6 parameter in the affected API endpoint until the issue is resolved. Found an issue in the description? Have something to add? Feel free to write us 👾