CVE-2025-6400: TOTOLINK N300RH HTTP POST Message formPortFw buffer overflow
Published Jun 21, 2025
·Updated
A vulnerability was found in TOTOLINK N300RH 6.1c.1390B20191101 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formPortFw of the component HTTP POST Message Handler. The manipulation of the argument servicetype leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
3 affected components
TOTOLINK N300RH
All of the following
TOTOLINK N300rh Firmware=6.1c.1390_b20191101
TOTOLINK N300RH
Event History
Jun 21, 2025
CVE Published
via MITRE·05:31 AM
Data Sourced
via MITRE·05:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Jun 11, 58473
Event
via NVD·02:26 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-6400?
CVE-2025-6400 is classified as a critical vulnerability.
2
What component is affected by CVE-2025-6400?
CVE-2025-6400 affects the HTTP POST Message Handler of the TOTOLINK N300RH.
3
How does CVE-2025-6400 occur?
CVE-2025-6400 occurs due to manipulation of the 'service_type' argument.
4
What is the potential impact of CVE-2025-6400?
The exploitation of CVE-2025-6400 can lead to a buffer overflow.
5
How do I fix CVE-2025-6400?
To fix CVE-2025-6400, update to the latest firmware version provided by TOTOLINK.