CVE-2025-45789

TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules

Medium Β· published May 8, 2025

CVSS v3.1
6.5
EPSS
1%
Percentile
56.9
In the wild
Unconfirmed
What it is

⚠️ A single unfortunate URL can trigger a buffer overflow in TOTOLINK A3100R! This lets attackers run rampant through your router settings. πŸ”₯ Think of it like a restaurant where a customer can make a reservation that throws the entire kitchen off balance β€” one awkward request can lead to a chaotic spaghetti of errors! 🍝 If exploited, an attacker could potentially manipulate device settings or gain unauthorized access. While it might not be catastrophic, it’s enough to cause frustration and disrupt your home network! 🚨

Put simply

Think of it like a restaurant where a customer can make a reservation that throws the entire kitchen off balance β€” one awkward request can lead to a chaotic spaghetti of errors! 🍝 This vulnerability arises from a buffer overflow triggered by the urlKeyword parameter in the setParentalRules function, allowing an attacker to overwrite memory and execute arbitrary code.

What to do

If exploited, an attacker could potentially manipulate device settings or gain unauthorized access. While it might not be catastrophic, it’s enough to cause frustration and disrupt your home network! 🚨 To mitigate this issue, update your router firmware to version V5.9c.1528 or later. Also, consider disabling remote management features to limit exposure. πŸ›‘οΈ You can fix this, security hero! Stay proactive, and your home network will be safer in no time! 😊

The record
Technical detail
CVSS v3.1
6.5 Β· MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00823 Β· 56.9th percentile
Published
2025-05-08T00:00Z
EPSS history
Timeline
  • 08 MAY 00:00Z
    TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules
    cvelistv5