ID
VAR-202506-1097
CVE
CVE-2025-6336
TITLE
TOTOLINK of ex1200t Buffer error vulnerability in firmware
Trust: 0.8
DESCRIPTION
A vulnerability was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. It has been classified as critical. Affected is an unknown function of the file /boafrm/formTmultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. TOTOLINK of ex1200t The firmware contains a buffer error vulnerability and a classic buffer overflow vulnerability.Service operation interruption (DoS) It may be in a state. TOTOLINK EX1200T is a dual-band wireless signal amplifier, mainly used to expand the coverage of existing wireless networks. TOTOLINK EX1200T has a buffer overflow vulnerability, which is caused by the parameter submit-url in the file /boafrm/formTmultiAP failing to correctly verify the length of the input data. Attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | totolink | model: | ex1200t | scope: | eq | version: | 4.1.2cu.5232_b20210713 | Trust: 1.0 |
| vendor: | totolink | model: | ex1200t | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | totolink | model: | ex1200t | scope: | eq | version: | ex1200t firmware 4.1.2cu.5232 b20210713 | Trust: 0.8 |
| vendor: | totolink | model: | ex1200t | scope: | - | version: | - | Trust: 0.8 |
| vendor: | totolink | model: | ex1200t 4.1.2cu.5232 b20210713 | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-120 | Trust: 1.0 |
| problemtype: | CWE-119 | Trust: 1.0 |
| problemtype: | Buffer error (CWE-119) [ others ] | Trust: 0.8 |
| problemtype: | Classic buffer overflow (CWE-120) [ others ] | Trust: 0.8 |
| problemtype: | Classic buffer overflow (CWE-120) [NVD evaluation ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-6336 | Trust: 3.2 |
| db: | VULDB | id: | 313332 | Trust: 1.8 |
| db: | JVNDB | id: | JVNDB-2025-009676 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-14529 | Trust: 0.6 |
REFERENCES
| url: | https://github.com/awindog/cve/blob/main/688/12.md | Trust: 2.4 |
| url: | https://github.com/awindog/cve/blob/main/688/12.md#poc | Trust: 1.8 |
| url: | https://vuldb.com/?id.313332 | Trust: 1.8 |
| url: | https://vuldb.com/?submit.596690 | Trust: 1.8 |
| url: | https://www.totolink.net/ | Trust: 1.8 |
| url: | https://vuldb.com/?ctiid.313332 | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-6336 | Trust: 0.8 |
SOURCES
| db: | CNVD | id: | CNVD-2025-14529 |
| db: | JVNDB | id: | JVNDB-2025-009676 |
| db: | NVD | id: | CVE-2025-6336 |
LAST UPDATE DATE
2025-07-28T23:25:31.574000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-14529 | date: | 2025-07-01T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-009676 | date: | 2025-07-23T08:35:00 |
| db: | NVD | id: | CVE-2025-6336 | date: | 2025-06-26T18:28:59.800 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-14529 | date: | 2025-07-01T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-009676 | date: | 2025-07-23T00:00:00 |
| db: | NVD | id: | CVE-2025-6336 | date: | 2025-06-20T12:15:22.307 |