CVE-2025-45797

PoC —

CVSS 3.1

9.8 critical

EPSS

17%p97

Published

May 8, 2025 (May 8, 2025)

Modified

Jun 17, 2026

Description

TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cste_modules/system.so.

Vendors: totolink
Products: a950rg firmware
Weakness: CWE-787, CWE-121
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (17.5%)

In the news0 stories

No ingested article mentions this CVE yet.