CVE-2025-25609

—

CVSS 3.1

8.0 high

EPSS

<1%p18

Published

Feb 28, 2025 (Feb 28, 2025)

Modified

Jun 17, 2026

Description

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_ipv6 parameter in the formIpv6Setup interface of /bin/boa

Vendors: totolink
Products: a3002r firmware
Weakness: CWE-120
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.