PT-2025-18022 · Totolink · Totolink N150Rt

Lcyf-Fizz

·

CVE-2025-3989

·

Publicado

2025-04-06

·

Atualizado

2025-05-02

CVSS v2.0

9.0

Alta

VetorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions TOTOLINK N150RT version 3.4.0-B20190525
Description A critical vulnerability was found in the TOTOLINK N150RT, affecting an unknown functionality of the file /boafrm/formStaticDHCP. The manipulation of the Hostname argument leads to a buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Recommendations As a temporary workaround, consider restricting access to the /boafrm/formStaticDHCP file until a patch is available. Avoid using the Hostname argument in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-120CWE-119

Identificadores relacionados

BDU:2025-05217
CVE-2025-3989

Produtos afetados

Totolink N150Rt