PT-2025-17567 · Totolink · Totolink A950Rg+3

Published 2025-04-22 · Updated 2025-04-24 · CVE-2025-28027

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TOTOLINK A830R version 4.1.2cu.5182 B20201102 TOTOLINK A950RG version 4.1.2cu.5161 B20200903 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5247 B20211129

Description A buffer overflow issue was discovered in the downloadFile.cgi of the affected TOTOLINK devices.

Recommendations For TOTOLINK A830R version 4.1.2cu.5182 B20201102, consider disabling access to the downloadFile.cgi until a patch is available. For TOTOLINK A950RG version 4.1.2cu.5161 B20200903, restrict the use of the downloadFile.cgi to minimize the risk of exploitation. For TOTOLINK A3000RU version 5.9c.5185 B20201128, avoid using the downloadFile.cgi until the issue is resolved. For TOTOLINK A3100R version 4.1.2cu.5247 B20211129, consider applying configuration changes to limit access to the downloadFile.cgi as a temporary workaround.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-12682

CVE-2025-28027

Affected Products

Totolink A3000Ru

Totolink A3100R

Totolink A830R

Totolink A950Rg

References · 8

• 🔥 https://github.com/cisagov/vulnrichment/blob/develop/2025/28xxx/CVE-2025-28026.json · Exploit
• 🔥 https://locrian-lightning-dc7.notion.site/CVE-2025-28027-BufferOverflow2-19e8e5e2b1a2806db38bea19abb4630a · Exploit
• 🔥 https://locrian-lightning-dc7.notion.site/BufferOverflow2-19e8e5e2b1a2806db38bea19abb4630a?pvs=73 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-28027 · Security Note
• https://bdu.fstec.ru/vul/2025-12682 · Security Note
• https://osv.dev/vulnerability/CVE-2025-28027 · Vendor Advisory
• https://twitter.com/cybercronai/status/1915228070954385894 · Twitter Post
• https://locrian-lightning-dc7.notion.site/BufferOverflow1-19e8e5e2b1a280bfbe52ec9975287f77 · Note