ID
VAR-202511-1198
CVE
CVE-2025-60699
TITLE
TOTOLINK of a950rg Stack-based buffer overflow vulnerability in firmware
Trust: 0.8
DESCRIPTION
A buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `global.so` binary. The `getSaveConfig` function retrieves the `http_host` parameter from user input via `websGetVar` and copies it into a fixed-size stack buffer (`v13`) using `strcpy()` without performing any length checks. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted HTTP request to the router's web interface, potentially leading to arbitrary code execution. The TOTOLINK A950RG is a next-generation Gigabit wireless router launched by TOTOLINK, a Chinese electronics company, supporting high-speed network connectivity and multi-device management. This vulnerability stems from a failure to properly validate the length of input data in the global.so binary file. Detailed vulnerability information is currently unavailable
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | totolink | model: | a950rg | scope: | eq | version: | 5.9c.4592_b20191022 | Trust: 1.0 |
| vendor: | totolink | model: | a950rg | scope: | - | version: | - | Trust: 0.8 |
| vendor: | totolink | model: | a950rg | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | totolink | model: | a950rg | scope: | eq | version: | a950rg firmware 5.9c.4592 b20191022 | Trust: 0.8 |
| vendor: | totolink | model: | a950rg v5.9c.4592 b20191022 all | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-121 | Trust: 1.0 |
| problemtype: | Stack-based buffer overflow (CWE-121) [ others ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-60699 | Trust: 3.2 |
| db: | JVNDB | id: | JVNDB-2025-019455 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-29713 | Trust: 0.6 |
REFERENCES
| url: | https://github.com/yifan20020708/sgtaint-0-day/blob/main/totolink/totolink-a950rg/cve-2025-60699.md | Trust: 1.8 |
| url: | https://www.totolink.net/ | Trust: 1.8 |
| url: | https://github.com/yifan20020708/sgtaint-0-day/blob/main/totolink/totolink-a950rg/2.md | Trust: 1.6 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-60699 | Trust: 0.8 |
SOURCES
| db: | CNVD | id: | CNVD-2025-29713 |
| db: | JVNDB | id: | JVNDB-2025-019455 |
| db: | NVD | id: | CVE-2025-60699 |
LAST UPDATE DATE
2025-12-19T22:54:53.409000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-29713 | date: | 2025-12-03T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-019455 | date: | 2025-11-19T07:35:00 |
| db: | NVD | id: | CVE-2025-60699 | date: | 2025-11-18T01:51:46.930 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-29713 | date: | 2025-12-02T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-019455 | date: | 2025-11-19T00:00:00 |
| db: | NVD | id: | CVE-2025-60699 | date: | 2025-11-13T20:15:52.773 |