CVE-2025-25635

published 2025-02-28

CVE-2025-25635: TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoe_dns1…

high 8 CVSS 3.1

AV A AC L PR L UI N S U C H I H A H

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoe_dns1 parameter in the formIpv6Setup interface of /bin/boa.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	a3002r_firmware	—	—

CWE-120