Security Advisory

CVE-2025-6486

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-06-22 17:31:07
Last updated 2025-06-23 16:51:47
Assigner VulDB
State PUBLISHED

Description

A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been declared as critical. This vulnerability affects the function formWlanMultipleAP of the file /boafrm/formWlanMultipleAP. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.