ГлавнаяУязвимости → CVE-2025-12240
8.8высокая

CVE-2025-12240

Описание

A security vulnerability has been detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Затрагиваемое ПО
Totolink A3300r firmwareTotolink A3300r
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://github.com/noahze01/IoT-vulnerable/blob/main/TOTOLink/A3300R/setDmzCfg.mdhttps://vuldb.com/?ctiid.329910https://vuldb.com/?id.329910https://vuldb.com/?submit.673722https://www.totolink.net/