CVE-2025-5789: TOTOLINK X15 HTTP POST Request formPortFw buffer overflow
A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument servicetype leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5789?
CVE-2025-5789 has been classified as a critical vulnerability.
How do I fix CVE-2025-5789?
To fix CVE-2025-5789, update the TOTOLINK X15 to the latest firmware version released by the vendor.
What component is affected by CVE-2025-5789?
CVE-2025-5789 affects the HTTP POST Request Handler in the TOTOLINK X15.
What type of vulnerability is CVE-2025-5789?
CVE-2025-5789 is a buffer overflow vulnerability.
What can be exploited in CVE-2025-5789?
The vulnerability allows manipulation of the argument 'service_type' to exploit the system.