Vulnerability Description
A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Totolink | N150Rt Firmware | 3.4.0-b20190525 |
| Totolink | N150Rt | - |
Related Weaknesses (CWE)
References
- https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/BufferOverflow_fExploitThird Party Advisory
- https://vuldb.com/?ctiid.308081Permissions RequiredVDB Entry
- https://vuldb.com/?id.308081Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.565958Third Party AdvisoryVDB Entry
- https://www.totolink.net/Product
FAQ
What is CVE-2025-4462?
CVE-2025-4462 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the ar...
How severe is CVE-2025-4462?
CVE-2025-4462 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-4462?
Check the references section above for vendor advisories and patch information. Affected products include: Totolink N150Rt Firmware, Totolink N150Rt.