CVE-2025-28020

Exploit

EPSS 0.38%
Veröffentlicht 23.04.2025 00:00:00
Zuletzt bearbeitet 06.05.2025 20:35:33
Erkennungen
Login

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Totolink ≫ A800r Firmware Version 4.1.2cu.5137_b20200730

Totolink ≫ A800r Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.38%	0.303

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	7.3	3.9	3.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://locrian-lightning-dc7.notion.site/BufferOverflow3-1948e5e2b1a280c28ef5c6e54b49324d?pvs=73

Third Party Advisory

Exploit

https://locrian-lightning-dc7.notion.site/CVE-2025-28020-BufferOverflow3-1948e5e2b1a280c28ef5c6e54b49324d

Third Party Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2025-28020

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-28020

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-28020

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-28020