CVE-2025-51630

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules

Critical · published July 17, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

🚨 A buffer overflow in the TOTOLINK N350RT could leave your network wide open! This flaw lets attackers exploit the ePort parameter, and the risk is alarmingly high! 🔥 Think of it like a reckless delivery driver who ignores a weight limit and overloads a package, causing everything to burst open on delivery — that’s what this vulnerability does to your router's memory! If exploited, an attacker could potentially execute arbitrary code on your router, gaining control over it and disrupting your entire network. This means unauthorized access to sensitive data, manipulation of your internet settings, and even using your network for malicious activities!

Put simply

Think of it like a reckless delivery driver who ignores a weight limit and overloads a package, causing everything to burst open on delivery — that’s what this vulnerability does to your router's memory! This critical vulnerability stems from a buffer overflow in the setIpPortFilterRules function, where improper validation of the ePort parameter allows an attacker to inject malicious code into the device's memory.

What to do

If exploited, an attacker could potentially execute arbitrary code on your router, gaining control over it and disrupting your entire network. This means unauthorized access to sensitive data, manipulation of your internet settings, and even using your network for malicious activities! Update your TOTOLINK N350RT firmware to the latest version immediately to patch this vulnerability. Additionally, review your router's configurations and consider implementing network segmentation to limit any potential damage. 🛡️ You've got this! By taking these steps, you can secure your network and maintain your status as a security hero! 🦸‍♂️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00511 · 42.7th percentile
Published
2025-07-17T00:00Z
EPSS history
Timeline
  • 17 JUL 00:00Z
    TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules
    cvelistv5