CVE-2025-45865 - TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface

CRITICAL

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface

Published May 13, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 0.60%

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface.

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-14607		Advisory
https://github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/6/overflow.md		Exploit
https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/258/ids/36.html		Product

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 13, 2025

Updated May 14, 2025

Reserved Apr 22, 2025

CISA Vulnrichment

Updated May 14, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 13, 2025

Updated May 14, 2025

GitHub

No data