CVE-2025-45863

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface

Critical · published May 13, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
49.6
In the wild
Unconfirmed
What it is

🚨 A single mismanaged parameter is the key to a buffer overflow in the TOTOLINK A3002R! This could lead to some seriously scary consequences! 🔥 Think of it like a crowded elevator that suddenly has too many people crammed inside—the structure can only hold so much before it breaks down and leaves everyone stuck! An attacker could exploit this vulnerability to crash the device or even run arbitrary code, potentially taking full control of your network. This not only compromises sensitive data but could also allow malicious activity to spread throughout connected devices!

Put simply

Think of it like a crowded elevator that suddenly has too many people crammed inside—the structure can only hold so much before it breaks down and leaves everyone stuck! This critical buffer overflow vulnerability arises from improper handling of the 'macstr' parameter in the 'formMapDelDevice' interface, allowing attackers to overwrite memory and execute harmful code.

What to do

An attacker could exploit this vulnerability to crash the device or even run arbitrary code, potentially taking full control of your network. This not only compromises sensitive data but could also allow malicious activity to spread throughout connected devices! Immediately update your TOTOLINK A3002R to version 4.0.0-B20230531.1405 or later. Additionally, review your network security settings to ensure proper device protection and monitor your device for any unusual activity. 🛡️ You've got this! Follow these steps, and you'll be on your way to securing your network in no time! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00632 · 49.6th percentile
Published
2025-05-13T00:00Z
EPSS history
Timeline
  • 13 MAY 00:00Z
    TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface
    cvelistv5