Sign-up

ID

VAR-202506-0395


CVE

CVE-2025-5736


TITLE

TOTOLINK  of  X15  Buffer error vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2025-007206

DESCRIPTION

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. TOTOLINK of X15 The firmware contains a buffer error vulnerability and a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. TOTOLINK X15 is a network wireless extender from China's TOTOLINK Electronics. Attackers can use this vulnerability to execute arbitrary code on the system or cause a denial of service

Trust: 2.16

sources: NVD: CVE-2025-5736 // JVNDB: JVNDB-2025-007206 // CNVD: CNVD-2025-12075

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2025-12075

AFFECTED PRODUCTS

vendor:totolinkmodel:x15scope:eqversion:1.0.0-b20230714.1105

Trust: 1.0

vendor:totolinkmodel:x15scope:eqversion:x15 firmware 1.0.0-b20230714.1105

Trust: 0.8

vendor:totolinkmodel:x15scope: - version: -

Trust: 0.8

vendor:totolinkmodel:x15scope:eqversion: -

Trust: 0.8

vendor:totolinkmodel:1.0.0-b20230714.1105scope:eqversion:x15

Trust: 0.6

sources: CNVD: CNVD-2025-12075 // JVNDB: JVNDB-2025-007206 // NVD: CVE-2025-5736

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com: CVE-2025-5736
value: HIGH

Trust: 1.0

OTHER: JVNDB-2025-007206
value: HIGH

Trust: 0.8

CNVD: CNVD-2025-12075
value: HIGH

Trust: 0.6

cna@vuldb.com: CVE-2025-5736
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

OTHER: JVNDB-2025-007206
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

CNVD: CNVD-2025-12075
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

cna@vuldb.com: CVE-2025-5736
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 1.0

OTHER: JVNDB-2025-007206
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2025-12075 // JVNDB: JVNDB-2025-007206 // NVD: CVE-2025-5736

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.0

problemtype:CWE-120

Trust: 1.0

problemtype:Buffer error (CWE-119) [ others ]

Trust: 0.8

problemtype: Classic buffer overflow (CWE-120) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2025-007206 // NVD: CVE-2025-5736

EXTERNAL IDS

db:NVDid:CVE-2025-5736

Trust: 3.2

db:VULDBid:311262

Trust: 1.8

db:JVNDBid:JVNDB-2025-007206

Trust: 0.8

db:CNVDid:CNVD-2025-12075

Trust: 0.6

sources: CNVD: CNVD-2025-12075 // JVNDB: JVNDB-2025-007206 // NVD: CVE-2025-5736

REFERENCES

url:https://vuldb.com/?id.311262

Trust: 1.8

url:https://vuldb.com/?submit.590620

Trust: 1.8

url:https://www.totolink.net/

Trust: 1.8

url:https://github.com/lena-lyy/cve/blob/main/goo/3.md

Trust: 1.6

url:https://vuldb.com/?ctiid.311262

Trust: 1.0

url:https://nvd.nist.gov/vuln/detail/cve-2025-5736

Trust: 0.8

sources: CNVD: CNVD-2025-12075 // JVNDB: JVNDB-2025-007206 // NVD: CVE-2025-5736

SOURCES

db:CNVDid:CNVD-2025-12075
db:JVNDBid:JVNDB-2025-007206
db:NVDid:CVE-2025-5736

LAST UPDATE DATE

2025-06-19T23:37:55.968000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2025-12075date:2025-06-11T00:00:00
db:JVNDBid:JVNDB-2025-007206date:2025-06-18T07:24:00
db:NVDid:CVE-2025-5736date:2025-06-17T20:37:11.700

SOURCES RELEASE DATE

db:CNVDid:CNVD-2025-12075date:2025-06-11T00:00:00
db:JVNDBid:JVNDB-2025-007206date:2025-06-18T00:00:00
db:NVDid:CVE-2025-5736date:2025-06-06T08:15:22.083