CVE-2025-28021

Exploit

EPSS 0.38%
Veröffentlicht 23.04.2025 00:00:00
Zuletzt bearbeitet 06.05.2025 20:35:27
Erkennungen
Login

TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the downloadFile.cgi through the v14 and v3 parameters

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Totolink ≫ A810r Firmware Version 4.1.2cu.5182_b20201026

Totolink ≫ A810r Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.38%	0.303

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	7.3	3.9	3.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://locrian-lightning-dc7.notion.site/BufferOverflow1-1948e5e2b1a280e8aa5ad87964c5cd3d?pvs=73

Third Party Advisory

Exploit

https://locrian-lightning-dc7.notion.site/CVE-2025-28021-BufferOverflow1-1948e5e2b1a280e8aa5ad87964c5cd3d

Third Party Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2025-28021

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-28021

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-28021

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-28021