CVE-2025-5503

Katalog CVE

CVSS 8.8 · High EPSS 5,8%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada totolink x15 firmware. Skor CVSS 3.1 8.8 (High) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. This affects the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Rincian

Terbit di NVD

3 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-121: Stack-based Buffer Overflow
CWE-787: Out-of-bounds Write

EPSS (30 hari)

5,8% peluang dieksploitasi; lebih tinggi dari 92,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/Yhuanhuan01/TOTOlink/blob/main/TOTOlink-x15.md#poc2-stack_overflow exploit · advisory pihak ketiga
• https://vuldb.com/?id.310917 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.310917 permissions required · vdb entry
• https://www.totolink.net/ product