Totolink X15 Firmware vulnerabilities

CVE-2025-5502 [CRITICAL] CWE-74 CVE-2025-5502: A vulnerability, which was classified as critical, has been found in TOTOLINK X15 1.0.0-B20230714.11 A vulnerability, which was classified as critical, has been found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this issue is the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and

CVE-2025-5739 [HIGH] CWE-119 CVE-2025-5739: A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This aff A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part of the file /boafrm/formSaveConfig of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the

CVE-2025-5503 [HIGH] CWE-119 CVE-2025-5503: A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. T A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. This affects the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and

CVE-2025-6146 [HIGH] CWE-119 CVE-2025-6146: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. This affects an unknown part of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to

CVE-2025-8244 [CRITICAL] CWE-119 CVE-2025-8244: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formMapDelDevice of the component HTTP POST Request Handler. The manipulation of the argument macstr leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclo

CVE-2025-5735 [HIGH] CWE-119 CVE-2025-5735: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issu A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formSetLg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the p

CVE-2025-5734 [HIGH] CWE-119 CVE-2025-5734: A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclos

CVE-2025-6165 [HIGH] CWE-119 CVE-2025-6165: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Th A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formTmultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed t

CVE-2025-6402 [HIGH] CWE-119 CVE-2025-6402: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Th A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formIpv6Setup of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed

CVE-2025-6150 [HIGH] CWE-119 CVE-2025-6150: A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by t A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been discl

CVE-2025-5736 [HIGH] CWE-119 CVE-2025-5736: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to th

CVE-2025-6399 [HIGH] CWE-119 CVE-2025-6399: A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. A A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed

CVE-2025-5738 [HIGH] CWE-119 CVE-2025-5738: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affec A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been discl

CVE-2025-5737 [HIGH] CWE-119 CVE-2025-5737: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Af A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has

CVE-2025-8242 [HIGH] CWE-119 CVE-2025-8242: A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr/url/vpnPassword/vpnUser leads to buffer overflow. The attack can be initiated remotely. The exploit has

CVE-2025-8243 [HIGH] CWE-119 CVE-2025-8243: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issu A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the

CVE-2025-8245 [HIGH] CWE-119 CVE-2025-8245: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Af A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAPVLAN of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit

CVE-2025-6824 [HIGH] CWE-119 CVE-2025-6824: A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Af A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclo

CVE-2025-8246 [HIGH] CWE-119 CVE-2025-8246: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affec A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formRoute of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been discl

CVE-2025-5787 [MEDIUM] CWE-119 CVE-2025-5787: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Af A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWsc of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has b