Sign-up

ID

VAR-202506-0899


CVE

CVE-2025-6143


TITLE

TOTOLINK  of  ex1200t  Buffer error vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2025-007605

DESCRIPTION

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an unknown function of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. TOTOLINK of ex1200t The firmware contains a buffer error vulnerability and a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. TOTOLINK EX1200T is a Wi-Fi range extender from China's TOTOLINK Electronics. TOTOLINK EX1200T has a buffer overflow vulnerability, which is caused by the parameter submit-url in the file /boafrm/formNtp failing to properly verify the length of the input data. Remote attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service attack

Trust: 2.16

sources: NVD: CVE-2025-6143 // JVNDB: JVNDB-2025-007605 // CNVD: CNVD-2025-13786

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2025-13786

AFFECTED PRODUCTS

vendor:totolinkmodel:ex1200tscope:eqversion:4.1.2cu.5232_b20210713

Trust: 1.0

vendor:totolinkmodel:ex1200tscope: - version: -

Trust: 0.8

vendor:totolinkmodel:ex1200tscope:eqversion: -

Trust: 0.8

vendor:totolinkmodel:ex1200tscope:eqversion:ex1200t firmware 4.1.2cu.5232 b20210713

Trust: 0.8

vendor:totolinkmodel:ex1200t 4.1.2cu.5232 b20210713scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2025-13786 // JVNDB: JVNDB-2025-007605 // NVD: CVE-2025-6143

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com: CVE-2025-6143
value: HIGH

Trust: 1.0

OTHER: JVNDB-2025-007605
value: HIGH

Trust: 0.8

CNVD: CNVD-2025-13786
value: HIGH

Trust: 0.6

cna@vuldb.com: CVE-2025-6143
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

OTHER: JVNDB-2025-007605
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

CNVD: CNVD-2025-13786
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

cna@vuldb.com: CVE-2025-6143
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 1.0

OTHER: JVNDB-2025-007605
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2025-13786 // JVNDB: JVNDB-2025-007605 // NVD: CVE-2025-6143

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.0

problemtype:CWE-120

Trust: 1.0

problemtype:Buffer error (CWE-119) [ others ]

Trust: 0.8

problemtype: Classic buffer overflow (CWE-120) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2025-007605 // NVD: CVE-2025-6143

EXTERNAL IDS

db:NVDid:CVE-2025-6143

Trust: 3.2

db:VULDBid:312618

Trust: 1.8

db:JVNDBid:JVNDB-2025-007605

Trust: 0.8

db:CNVDid:CNVD-2025-13786

Trust: 0.6

sources: CNVD: CNVD-2025-13786 // JVNDB: JVNDB-2025-007605 // NVD: CVE-2025-6143

REFERENCES

url:https://github.com/awindog/cve/blob/main/13.md

Trust: 1.8

url:https://vuldb.com/?id.312618

Trust: 1.8

url:https://vuldb.com/?submit.593004

Trust: 1.8

url:https://www.totolink.net/

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2025-6143

Trust: 1.4

url:https://vuldb.com/?ctiid.312618

Trust: 1.0

sources: CNVD: CNVD-2025-13786 // JVNDB: JVNDB-2025-007605 // NVD: CVE-2025-6143

SOURCES

db:CNVDid:CNVD-2025-13786
db:JVNDBid:JVNDB-2025-007605
db:NVDid:CVE-2025-6143

LAST UPDATE DATE

2025-07-04T19:31:13.995000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2025-13786date:2025-06-26T00:00:00
db:JVNDBid:JVNDB-2025-007605date:2025-07-01T03:15:00
db:NVDid:CVE-2025-6143date:2025-06-23T19:29:54.330

SOURCES RELEASE DATE

db:CNVDid:CNVD-2025-13786date:2025-06-26T00:00:00
db:JVNDBid:JVNDB-2025-007605date:2025-07-01T00:00:00
db:NVDid:CVE-2025-6143date:2025-06-16T23:15:22.500