CVE-2025-5910: high-severity vulnerability in TOTOLINK EX1200T
TOTOLINK EX1200T HTTP POST Request formWsc buffer overflow
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 1.1%
A vulnerability has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWsc of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
TOTOLINK · EX1200TRelated CVEs — TOTOLINK EX1200T
In the same product, most dangerous first.
CVE-2025-5907HIGHTOTOLINK EX1200T HTTP POST Request formFilter buffer overflowEPSS 6.4%CVE-2025-5792HIGHTOTOLINK EX1200T HTTP POST Request formWlanRedirect buffer overflowEPSS 6.3%CVE-2025-5909HIGHTOTOLINK EX1200T HTTP POST Request formReflashClientTbl buffer overflowEPSS 1.4%CVE-2025-5600CRITICALTOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflowEPSS 1.3%CVE-2025-6128HIGHTOTOLINK EX1200T HTTP POST Request formWirelessTbl buffer overflowEPSS 1.2%CVE-2025-5911HIGHTOTOLINK EX1200T HTTP POST Request formDMZ buffer overflowEPSS 1.1%