CVE-2025-55588: Buffer Overflow

Published Aug 18, 2025

Updated

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the fwip parameter at /boafrm/formPortFw. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Affected Software

3 affected components

TOTOLINK A3002R

All of the following

TOTOLINK A3002R Firmware=4.0.0-b20230531.1404

TOTOLINK A3002R

Event History

Aug 18, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-55588?

CVE-2025-55588 has a critical severity level due to its potential to cause a Denial of Service (DoS).

How do I fix CVE-2025-55588?

To fix CVE-2025-55588, users should update the firmware of the TOTOLINK A3002R to the latest version provided by the vendor.

What type of vulnerability is CVE-2025-55588?

CVE-2025-55588 is classified as a buffer overflow vulnerability affecting the fw_ip parameter.

What can an attacker do with CVE-2025-55588?

An attacker can exploit CVE-2025-55588 to create a Denial of Service (DoS) condition on the affected device.

Which device is affected by CVE-2025-55588?

CVE-2025-55588 specifically affects the TOTOLINK A3002R router running firmware version 4.0.0-B20230531.1404.