Details of VAR-202507-2358

ID

VAR-202507-2358

CVE

CVE-2025-7837

TITLE

TOTOLINK of t6 Buffer error vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2025-009708

DESCRIPTION

A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this issue is the function recvSlaveStaInfo of the component MQTT Service. The manipulation of the argument dest leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. TOTOLINK of t6 The firmware contains a buffer error vulnerability and a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. The TOTOLINK T6 is a wireless dual-band router from the Chinese company TOTOLINK. This vulnerability stems from the failure of the dest parameter in the recvSlaveStaInfo function in the MQTT service to properly validate the length of the input data. An attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service

Trust: 2.16

sources: NVD: CVE-2025-7837 // JVNDB: JVNDB-2025-009708 // CNVD: CNVD-2025-17143

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2025-17143

AFFECTED PRODUCTS

vendor:	totolink	model:	t6	scope:	eq	version:	v4.1.5cu.748_b20211015	Trust: 1.0
vendor:	totolink	model:	t6	scope:	eq	version:	-	Trust: 0.8
vendor:	totolink	model:	t6	scope:	-	version:	-	Trust: 0.8
vendor:	totolink	model:	t6	scope:	eq	version:	t6 firmware v4.1.5cu.748 b20211015	Trust: 0.8
vendor:	totolink	model:	t6 4.1.5cu.748 b20211015	scope:	-	version:	-	Trust: 0.6

sources: CNVD: CNVD-2025-17143 // JVNDB: JVNDB-2025-009708 // NVD: CVE-2025-7837

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com:	CVE-2025-7837
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2025-009708
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2025-17143
value:	HIGH
Trust: 0.6

cna@vuldb.com:	CVE-2025-7837
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
OTHER:	JVNDB-2025-009708
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
CNVD:	CNVD-2025-17143
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

cna@vuldb.com:	CVE-2025-7837
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2025-009708
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2025-17143 // JVNDB: JVNDB-2025-009708 // NVD: CVE-2025-7837

PROBLEMTYPE DATA

problemtype:	CWE-119	Trust: 1.0
problemtype:	CWE-120	Trust: 1.0
problemtype:	Buffer error (CWE-119) [ others ]	Trust: 0.8
problemtype:	Classic buffer overflow (CWE-120) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2025-009708 // NVD: CVE-2025-7837

EXTERNAL IDS

db:	NVD	id:	CVE-2025-7837	Trust: 3.2
db:	VULDB	id:	316940	Trust: 1.8
db:	JVNDB	id:	JVNDB-2025-009708	Trust: 0.8
db:	CNVD	id:	CNVD-2025-17143	Trust: 0.6

sources: CNVD: CNVD-2025-17143 // JVNDB: JVNDB-2025-009708 // NVD: CVE-2025-7837

REFERENCES

url:	https://github.com/anduinbrian/public/blob/main/totolink%20t6/vuln/4.md	Trust: 1.8
url:	https://github.com/anduinbrian/public/blob/main/totolink%20t6/vuln/4.md#poc	Trust: 1.8
url:	https://vuldb.com/?id.316940	Trust: 1.8
url:	https://vuldb.com/?submit.617572	Trust: 1.8
url:	https://www.totolink.net/	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2025-7837	Trust: 1.4
url:	https://vuldb.com/?ctiid.316940	Trust: 1.0

sources: CNVD: CNVD-2025-17143 // JVNDB: JVNDB-2025-009708 // NVD: CVE-2025-7837

SOURCES

db:	CNVD	id:	CNVD-2025-17143
db:	JVNDB	id:	JVNDB-2025-009708
db:	NVD	id:	CVE-2025-7837

LAST UPDATE DATE

2025-07-31T23:46:03.045000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2025-17143	date:	2025-07-30T00:00:00
db:	JVNDB	id:	JVNDB-2025-009708	date:	2025-07-24T01:59:00
db:	NVD	id:	CVE-2025-7837	date:	2025-07-23T16:43:26.350

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2025-17143	date:	2025-07-28T00:00:00
db:	JVNDB	id:	JVNDB-2025-009708	date:	2025-07-24T00:00:00
db:	NVD	id:	CVE-2025-7837	date:	2025-07-19T17:15:24.150