A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. This vulnerability affects unknown code of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/awindog/cve/blob/main/12.md | Not Applicable |
| https://vuldb.com/?ctiid.311338 | Permissions Required |
| https://vuldb.com/?id.311338 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.591219 | Third Party Advisory VDB Entry |
| https://www.totolink.net/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
09 Jun 2025, 19:08
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Totolink x15
Totolink Totolink x15 Firmware |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CPE | cpe:2.3:h:totolink:x15:-:*:*:*:*:*:*:* cpe:2.3:o:totolink:x15_firmware:1.0.0-b20230714.1105:*:*:*:*:*:*:* |
|
| References | () https://github.com/awindog/cve/blob/main/12.md - Not Applicable | |
| References | () https://vuldb.com/?submit.591219 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.311338 - Permissions Required | |
| References | () https://www.totolink.net/ - Product | |
| References | () https://vuldb.com/?id.311338 - Third Party Advisory, VDB Entry |
06 Jun 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-06 18:15
Updated : 2025-06-09 19:08
NVD link : CVE-2025-5790
Mitre link : CVE-2025-5790
JSON object : View
Products Affected
totolink
- x15_firmware
- x15