CVE-2025-5785: TOTOLINK X15 HTTP POST Request formWirelessTbl buffer overflow
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5785?
CVE-2025-5785 is classified as a critical vulnerability.
How do I fix CVE-2025-5785?
To fix CVE-2025-5785, users should update their TOTOLINK X15 firmware to the latest version provided by the vendor.
What component is affected by CVE-2025-5785?
CVE-2025-5785 affects the HTTP POST Request Handler of the formWirelessTbl component.
What type of vulnerability is CVE-2025-5785?
CVE-2025-5785 is a buffer overflow vulnerability caused by improper handling of the submit-url argument.
Which device is impacted by CVE-2025-5785?
CVE-2025-5785 impacts the TOTOLINK X15 device running firmware version 1.0.0-B20230714.1105.