CVE-2025-28018

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:totolink:a800r_firmware:4.1.2cu.5137_b20200730:*:*:*:*:*:*:*
cpe:2.3:h:totolink:a800r:-:*:*:*:*:*:*:*

History

06 May 2025, 20:35

Type Values Removed Values Added
CPE cpe:2.3:h:totolink:a800r:-:*:*:*:*:*:*:*
cpe:2.3:o:totolink:a800r_firmware:4.1.2cu.5137_b20200730:*:*:*:*:*:*:*
References () https://locrian-lightning-dc7.notion.site/BufferOverflow2-1948e5e2b1a28070a8d1d1ba725febff - () https://locrian-lightning-dc7.notion.site/BufferOverflow2-1948e5e2b1a28070a8d1d1ba725febff - Exploit, Third Party Advisory
First Time Totolink a800r
Totolink
Totolink a800r Firmware

23 Apr 2025, 17:16

Type Values Removed Values Added
New CVE

Information

Published : 2025-04-23 17:16

Updated : 2025-05-06 20:35


NVD link : CVE-2025-28018

Mitre link : CVE-2025-28018


JSON object : View

Products Affected

totolink

  • a800r_firmware
  • a800r
CWE

No CWE.