CVE-2025-5503: TOTOLINK X15 formMapReboot stack-based overflow
A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. This affects the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5503?
CVE-2025-5503 is classified as a critical vulnerability.
How does CVE-2025-5503 affect TOTOLINK X15?
CVE-2025-5503 affects the function formMapReboot in TOTOLINK X15, leading to a stack-based buffer overflow.
What is the cause of the buffer overflow in CVE-2025-5503?
The buffer overflow in CVE-2025-5503 is triggered by the manipulation of the argument deviceMacAddr.
Can CVE-2025-5503 be exploited remotely?
Yes, CVE-2025-5503 can be exploited remotely, allowing attackers to potentially execute arbitrary code.
How do I protect my device from CVE-2025-5503?
To protect against CVE-2025-5503, immediately update the firmware of your TOTOLINK X15 to the latest version that addresses this vulnerability.