PT-2025-41240 · Totolink · Totolink N600R

Z472421519 · Published 2025-10-08 · Updated 2025-10-13 · CVE-2025-11444

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R versions prior to 4.3.0cu.7866 B20220506

Description A buffer overflow issue exists in TOTOLINK N600R. The issue is located in the setWiFiBasicConfig function within the /cgi-bin/cstecgi.cgi file of the HTTP Request Handler component. Manipulation of the wepkey argument can trigger the buffer overflow, allowing for remote exploitation. The exploit has been publicly disclosed.

Recommendations Update TOTOLINK N600R to a version newer than 4.3.0cu.7866 B20220506.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

BDU:2025-12824

CVE-2025-11444

Affected Products

Totolink N600R

References · 15

• 🔥 https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/TOTOLINK/wepkey/wepkey.md#reproduce · Exploit
• 🔥 https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/TOTOLINK/wepkey/wepkey.md · Exploit
• https://bdu.fstec.ru/vul/2025-12824 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11444 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11444 · Security Note
• https://twitter.com/VulmonFeeds/status/1975847026735698313 · Twitter Post
• https://t.me/cveNotify/137777 · Telegram Post
• https://totolink.net · Note
• https://vuldb.com/?submit.666915 · Note
• https://twitter.com/CveFindCom/status/1975843565306617875 · Twitter Post
• https://t.me/CVEtracker/34424 · Telegram Post
• https://twitter.com/CVEnew/status/1975857464953421849 · Twitter Post
• https://twitter.com/cracbot/status/1977690843269025967 · Twitter Post
• https://vuldb.com/?id.327381 · Note
• https://vuldb.com/?ctiid.327381 · Note