CVE-2025-45861: Buffer Overflow
Published May 13, 2025
·Updated
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface.
Affected Software
3 affected components
TOTOLINK A3002R
All of the following
TOTOLINK A3002R Firmware=4.0.0-b20230531.1404
TOTOLINK A3002R
Event History
May 13, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-45861?
CVE-2025-45861 is classified as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2025-45861?
To mitigate CVE-2025-45861, it is recommended to update your TOTOLINK A3002R router to the latest firmware version available from the manufacturer.
3
What is the impact of CVE-2025-45861?
CVE-2025-45861 allows an attacker to exploit a buffer overflow, potentially leading to arbitrary code execution on the router.
4
Which devices are affected by CVE-2025-45861?
CVE-2025-45861 specifically affects TOTOLINK A3002R routers running firmware version 4.0.0-B20230531.1404.
5
Is CVE-2025-45861 easy to exploit?
CVE-2025-45861 is considered relatively easy to exploit, especially if the device is accessible over the internet.