CVE-2025-45843: High severity totolink nr1800x firmware vulnerability
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-45843?
CVE-2025-45843 is classified as a high-severity vulnerability due to its potential to allow remote code execution through an authenticated stack overflow.
How do I fix CVE-2025-45843?
To mitigate CVE-2025-45843, it is recommended to update the firmware of the TOTOLINK NR1800X to the latest version provided by the vendor.
Who is affected by CVE-2025-45843?
Users of the TOTOLINK NR1800X firmware version V9.1.0u.6681_B20230703 are affected by CVE-2025-45843.
What does CVE-2025-45843 exploit?
CVE-2025-45843 exploits a vulnerability in the setWiFiGuestCfg function, specifically through an authenticated stack overflow via the ssid parameter.
Is CVE-2025-45843 remote or local?
CVE-2025-45843 is an authenticated remote vulnerability, which means it requires access to the device’s authenticated session.