CVE-2025-28032

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm parameter.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:totolink:a800r_firmware:4.1.2cu.5137_b20200730:*:*:*:*:*:*:*
cpe:2.3:h:totolink:a800r:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:totolink:a810r_firmware:4.1.2cu.5182_b20201026:*:*:*:*:*:*:*
cpe:2.3:h:totolink:a810r:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:totolink:a830r_firmware:4.1.2cu.5182_b20201102:*:*:*:*:*:*:*
cpe:2.3:h:totolink:a830r:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:totolink:a950rg_firmware:4.1.2cu.5161_b20200903:*:*:*:*:*:*:*
cpe:2.3:h:totolink:a950rg:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:totolink:a3000ru_firmware:5.9c.5185_b20201128:*:*:*:*:*:*:*
cpe:2.3:h:totolink:a3000ru:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:totolink:a3100r_firmware:4.1.2cu.5247_b20211129:*:*:*:*:*:*:*
cpe:2.3:h:totolink:a3100r:-:*:*:*:*:*:*:*

History

29 Apr 2025, 16:19

Type Values Removed Values Added
CPE cpe:2.3:h:totolink:a3000ru:-:*:*:*:*:*:*:*
cpe:2.3:o:totolink:a3100r_firmware:4.1.2cu.5247_b20211129:*:*:*:*:*:*:*
cpe:2.3:h:totolink:a810r:-:*:*:*:*:*:*:*
cpe:2.3:h:totolink:a830r:-:*:*:*:*:*:*:*
cpe:2.3:o:totolink:a950rg_firmware:4.1.2cu.5161_b20200903:*:*:*:*:*:*:*
cpe:2.3:h:totolink:a3100r:-:*:*:*:*:*:*:*
cpe:2.3:o:totolink:a830r_firmware:4.1.2cu.5182_b20201102:*:*:*:*:*:*:*
cpe:2.3:o:totolink:a3000ru_firmware:5.9c.5185_b20201128:*:*:*:*:*:*:*
cpe:2.3:h:totolink:a800r:-:*:*:*:*:*:*:*
cpe:2.3:o:totolink:a800r_firmware:4.1.2cu.5137_b20200730:*:*:*:*:*:*:*
cpe:2.3:o:totolink:a810r_firmware:4.1.2cu.5182_b20201026:*:*:*:*:*:*:*
cpe:2.3:h:totolink:a950rg:-:*:*:*:*:*:*:*
References () https://locrian-lightning-dc7.notion.site/BufferOverflow6-19f8e5e2b1a28052bda1f6ede9db341d - () https://locrian-lightning-dc7.notion.site/BufferOverflow6-19f8e5e2b1a28052bda1f6ede9db341d - Third Party Advisory, Exploit
First Time Totolink a950rg Firmware
Totolink a830r
Totolink a3100r Firmware
Totolink a3000ru Firmware
Totolink a950rg
Totolink a810r
Totolink a800r Firmware
Totolink a800r
Totolink a3000ru
Totolink a810r Firmware
Totolink a3100r
Totolink a830r Firmware
Totolink

22 Apr 2025, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-04-22 14:15

Updated : 2025-04-29 16:19


NVD link : CVE-2025-28032

Mitre link : CVE-2025-28032


JSON object : View

Products Affected

totolink

  • a810r_firmware
  • a3000ru
  • a3100r_firmware
  • a800r_firmware
  • a800r
  • a950rg_firmware
  • a830r_firmware
  • a3000ru_firmware
  • a830r
  • a950rg
  • a3100r
  • a810r
CWE

No CWE.