CVE-2025-25524

EPSS 0.17%
Veröffentlicht 11.02.2025 19:15:19
Zuletzt bearbeitet 29.04.2025 16:22:26
Erkennungen
Login

Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652_B20230116 due to the lack of length verification, which is related to the addition of Wi-Fi filtering rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Totolink ≫ X6000r Firmware Version 9.4.0cu.652_b20230116

Totolink ≫ X6000r Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.17%	0.071

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	5.1	2.5	2.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://gist.github.com/XiaoCurry/ce1f80afd2d8be8ca543437f16eae96b

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2025-25524

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-25524

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-25524

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-25524