CVE-2025-45841: Critical severity totolink nr1800x firmware vulnerability
Published May 8, 2025
·Updated
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function.
Affected Software
3 affected components
TOTOLINK NR1800X
All of the following
TOTOLINK Nr1800x Firmware=9.1.0u.6681_b20230703
TOTOLINK NR1800X
Event History
May 8, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Oct 7, 57345
Event
via FIRST·08:56 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-45841?
CVE-2025-45841 is considered a critical vulnerability due to the potential for remote code execution through an authenticated stack overflow.
2
How do I fix CVE-2025-45841?
To fix CVE-2025-45841, update your TOTOLINK NR1800X firmware to the latest version provided by TOTOLINK.
3
What devices are affected by CVE-2025-45841?
CVE-2025-45841 affects the TOTOLINK NR1800X device running firmware version V9.1.0u.6681_B20230703.
4
Can CVE-2025-45841 be exploited remotely?
Yes, CVE-2025-45841 can potentially be exploited remotely if an attacker gains access to the authenticated user interface.
5
What type of vulnerability is CVE-2025-45841?
CVE-2025-45841 is classified as an authenticated stack overflow vulnerability in the setSmsCfg function.