medium5.4
CVE-2025-45867
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the static_dns1 parameter in the formIpv6Setup interface.
Impact
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the static_dns1 parameter in the formIpv6Setup interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A3002r Firmware | Version 4.0.0-b20230531.1404 |