Sign-up

ID

VAR-202506-1246


CVE

CVE-2025-6568


TITLE

TOTOLINK  of  ex1200t  Buffer error vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2025-008011

DESCRIPTION

A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an unknown function of the file /boafrm/formIpv6Setup of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. TOTOLINK of ex1200t The firmware contains a buffer error vulnerability and a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. TOTOLINK EX1200T is a dual-band wireless signal amplifier, mainly used to extend the coverage of existing wireless networks. No detailed vulnerability details are currently provided

Trust: 2.16

sources: NVD: CVE-2025-6568 // JVNDB: JVNDB-2025-008011 // CNVD: CNVD-2025-14523

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2025-14523

AFFECTED PRODUCTS

vendor:totolinkmodel:ex1200tscope:eqversion:4.1.2cu.5232_b20210713

Trust: 1.0

vendor:totolinkmodel:ex1200tscope:eqversion: -

Trust: 0.8

vendor:totolinkmodel:ex1200tscope:eqversion:ex1200t firmware 4.1.2cu.5232 b20210713

Trust: 0.8

vendor:totolinkmodel:ex1200tscope: - version: -

Trust: 0.8

vendor:totolinkmodel:ex1200t 4.1.2cu.5232 b20210713scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2025-14523 // JVNDB: JVNDB-2025-008011 // NVD: CVE-2025-6568

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com: CVE-2025-6568
value: HIGH

Trust: 1.0

OTHER: JVNDB-2025-008011
value: HIGH

Trust: 0.8

CNVD: CNVD-2025-14523
value: HIGH

Trust: 0.6

cna@vuldb.com: CVE-2025-6568
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

OTHER: JVNDB-2025-008011
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

CNVD: CNVD-2025-14523
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

cna@vuldb.com: CVE-2025-6568
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 1.0

OTHER: JVNDB-2025-008011
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2025-14523 // JVNDB: JVNDB-2025-008011 // NVD: CVE-2025-6568

PROBLEMTYPE DATA

problemtype:CWE-120

Trust: 1.0

problemtype:CWE-119

Trust: 1.0

problemtype:Buffer error (CWE-119) [ others ]

Trust: 0.8

problemtype: Classic buffer overflow (CWE-120) [ others ]

Trust: 0.8

problemtype: Classic buffer overflow (CWE-120) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2025-008011 // NVD: CVE-2025-6568

EXTERNAL IDS

db:NVDid:CVE-2025-6568

Trust: 3.2

db:VULDBid:313740

Trust: 1.8

db:JVNDBid:JVNDB-2025-008011

Trust: 0.8

db:CNVDid:CNVD-2025-14523

Trust: 0.6

sources: CNVD: CNVD-2025-14523 // JVNDB: JVNDB-2025-008011 // NVD: CVE-2025-6568

REFERENCES

url:https://github.com/d2pq/cve/blob/main/616/23.md

Trust: 1.8

url:https://github.com/d2pq/cve/blob/main/616/23.md#poc

Trust: 1.8

url:https://vuldb.com/?id.313740

Trust: 1.8

url:https://vuldb.com/?submit.601344

Trust: 1.8

url:https://www.totolink.net/

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2025-6568

Trust: 1.4

url:https://vuldb.com/?ctiid.313740

Trust: 1.0

sources: CNVD: CNVD-2025-14523 // JVNDB: JVNDB-2025-008011 // NVD: CVE-2025-6568

SOURCES

db:CNVDid:CNVD-2025-14523
db:JVNDBid:JVNDB-2025-008011
db:NVDid:CVE-2025-6568

LAST UPDATE DATE

2025-07-06T19:33:23.844000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2025-14523date:2025-07-01T00:00:00
db:JVNDBid:JVNDB-2025-008011date:2025-07-04T07:59:00
db:NVDid:CVE-2025-6568date:2025-06-27T16:43:42.703

SOURCES RELEASE DATE

db:CNVDid:CNVD-2025-14523date:2025-07-01T00:00:00
db:JVNDBid:JVNDB-2025-008011date:2025-07-04T00:00:00
db:NVDid:CVE-2025-6568date:2025-06-24T15:15:25.823