CVE-2025-6143: TOTOLINK EX1200T HTTP POST Request formNtp buffer overflow
A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. Affected is an unknown function of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6143?
CVE-2025-6143 has been classified as a critical vulnerability.
How does CVE-2025-6143 affect the TOTOLINK EX1200T?
CVE-2025-6143 affects the HTTP POST Request Handler, allowing for buffer overflow via manipulation of the submit-url argument.
What are the consequences of exploiting CVE-2025-6143?
Exploitation of CVE-2025-6143 can lead to system crashes or potential remote code execution.
How do I fix CVE-2025-6143?
To fix CVE-2025-6143, it is recommended to update the TOTOLINK EX1200T firmware to the latest version that addresses this vulnerability.
Can CVE-2025-6143 be mitigated without a firmware update?
While a firmware update is the primary solution for CVE-2025-6143, configuring the device securely and limiting external access can offer temporary protection.