PT-2025-25596 · Totolink · Totolink Ex1200T

Yeleipeng

·

Published

2025-06-09

·

Updated

2025-06-23

·

CVE-2025-6144

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions TOTOLINK EX1200T version 4.1.2cu.5232 B20210713
Description A critical vulnerability has been found in the TOTOLINK EX1200T router's embedded boa server, specifically in the /boafrm/formSysCmd file. This issue is related to a buffer overflow in memory, which can be exploited by sending a specially crafted POST request. The manipulation of the submit-url argument leads to this buffer overflow. The attack can be launched remotely, potentially affecting the confidentiality, integrity, and availability of protected information.
Recommendations For TOTOLINK EX1200T version 4.1.2cu.5232 B20210713, as a temporary workaround, consider disabling the /boafrm/formSysCmd endpoint until a patch is available. Restrict access to the HTTP POST Request Handler to minimize the risk of exploitation. Avoid using the submit-url argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

Related Identifiers

BDU:2025-06892
CVE-2025-6144

Affected Products

Totolink Ex1200T