ID
VAR-202507-2568
CVE
CVE-2025-8243
TITLE
TOTOLINK of X15 Buffer error vulnerability in firmware
Trust: 0.8
DESCRIPTION
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. TOTOLINK of X15 The firmware contains buffer error vulnerabilities, classic buffer overflow vulnerabilities, and out-of-bounds write vulnerabilities.Service operation interruption (DoS) It may be in a state. The TOTOLINK X15 is a wireless network extender manufactured by TOTOLINK, a Chinese company. It's primarily used to extend Wi-Fi coverage. It supports Wi-Fi 6 technology and offers AX1500 wireless transmission speeds, making it suitable for home and small office environments. An attacker could exploit this vulnerability to cause a denial of service or execute arbitrary code
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | totolink | model: | x15 | scope: | eq | version: | 1.0.0-b20230714.1105 | Trust: 1.0 |
| vendor: | totolink | model: | x15 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | totolink | model: | x15 | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | totolink | model: | x15 | scope: | eq | version: | x15 firmware 1.0.0-b20230714.1105 | Trust: 0.8 |
| vendor: | totolink | model: | 1.0.0b20230714.1105 | scope: | eq | version: | x15 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-120 | Trust: 1.0 |
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | CWE-119 | Trust: 1.0 |
| problemtype: | Buffer error (CWE-119) [ others ] | Trust: 0.8 |
| problemtype: | Classic buffer overflow (CWE-120) [ others ] | Trust: 0.8 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD evaluation ] | Trust: 0.8 |
PATCH
| title: | Patch for TOTOLINK X15 devicemac1 parameter buffer overflow vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/714951 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-8243 | Trust: 3.2 |
| db: | VULDB | id: | 317831 | Trust: 2.4 |
| db: | JVNDB | id: | JVNDB-2025-010249 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-17523 | Trust: 0.6 |
REFERENCES
| url: | https://vuldb.com/?id.317831 | Trust: 2.4 |
| url: | https://vuldb.com/?submit.622691 | Trust: 2.4 |
| url: | https://github.com/panda666-888/vuls/blob/main/totolink/x15/formmapdel.md | Trust: 2.4 |
| url: | https://www.totolink.net/ | Trust: 2.4 |
| url: | https://vuldb.com/?ctiid.317831 | Trust: 1.6 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-8243 | Trust: 0.8 |
SOURCES
| db: | CNVD | id: | CNVD-2025-17523 |
| db: | JVNDB | id: | JVNDB-2025-010249 |
| db: | NVD | id: | CVE-2025-8243 |
LAST UPDATE DATE
2025-08-06T23:19:01.022000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-17523 | date: | 2025-08-05T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-010249 | date: | 2025-07-30T09:01:00 |
| db: | NVD | id: | CVE-2025-8243 | date: | 2025-07-29T21:03:31.950 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-17523 | date: | 2025-08-04T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-010249 | date: | 2025-07-30T00:00:00 |
| db: | NVD | id: | CVE-2025-8243 | date: | 2025-07-27T22:15:25.880 |