CVE-2025-5735: TOTOLINK X15 HTTP POST Request formSetLg buffer overflow
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formSetLg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5735?
CVE-2025-5735 is classified as a critical vulnerability.
How do I fix CVE-2025-5735?
To fix CVE-2025-5735, update the TOTOLINK X15 firmware to the latest version that addresses this vulnerability.
What component is affected by CVE-2025-5735?
CVE-2025-5735 affects the HTTP POST Request Handler in the TOTOLINK X15 router.
What type of vulnerability is CVE-2025-5735?
CVE-2025-5735 is a buffer overflow vulnerability that can be exploited via manipulation of the submit-url argument.
What is the impact of exploiting CVE-2025-5735?
Exploiting CVE-2025-5735 can potentially lead to remote code execution due to the buffer overflow condition.