PoC Index

CVE-2025-25635

HIGH 8.0EPSS 0.4%

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoe_dns1 parameter in the formIpv6Setup interface of /bin/boa.

CVSS v3.1
8.0 HIGHCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.41% chance of exploitation in the next 30 days, 34th percentile
Published
2025-02-28
Updated
2025-09-02

Proof-of-concept exploits (1)

References

Related