CVE-2025-5907: falha de alta gravidade em TOTOLINK EX1200T
TOTOLINK EX1200T HTTP POST Request formFilter buffer overflow
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 6.9%
A vulnerability classified as critical was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
TOTOLINK · EX1200TCVEs relacionadas — TOTOLINK EX1200T
No mesmo produto, das mais perigosas para as menos.
CVE-2025-5792HIGHTOTOLINK EX1200T HTTP POST Request formWlanRedirect buffer overflowEPSS 6.3%CVE-2025-5909HIGHTOTOLINK EX1200T HTTP POST Request formReflashClientTbl buffer overflowEPSS 1.5%CVE-2025-5600CRITICALTOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflowEPSS 1.3%CVE-2025-6128HIGHTOTOLINK EX1200T HTTP POST Request formWirelessTbl buffer overflowEPSS 1.2%CVE-2025-5911HIGHTOTOLINK EX1200T HTTP POST Request formDMZ buffer overflowEPSS 1.2%CVE-2025-5910HIGHTOTOLINK EX1200T HTTP POST Request formWsc buffer overflowEPSS 1.2%