CVE-2025-3989: TOTOLINK N150RT formStaticDHCP buffer overflow
A vulnerability classified as critical was found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this vulnerability is an unknown functionality of the file /boafrm/formStaticDHCP. The manipulation of the argument Hostname leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3989?
The severity of CVE-2025-3989 is classified as critical.
How does CVE-2025-3989 affect TOTOLINK N150RT devices?
CVE-2025-3989 affects TOTOLINK N150RT devices through a buffer overflow vulnerability in the file /boafrm/formStaticDHCP.
Can CVE-2025-3989 be exploited remotely?
Yes, CVE-2025-3989 can be exploited remotely by manipulating the Hostname argument.
What are the potential impacts of exploiting CVE-2025-3989?
Exploiting CVE-2025-3989 could lead to unauthorized access or control over the affected device.
What steps should I take to protect against CVE-2025-3989?
To protect against CVE-2025-3989, it is advised to update the firmware of your TOTOLINK N150RT device to the latest version.