Vulnerability Details CVE-2025-25635
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoe_dns1 parameter in the formIpv6Setup interface of /bin/boa.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.4%
CVSS Severity
CVSS v3 Score 8.0
Products affected by CVE-2025-25635
-
cpe:2.3:h:totolink:a3002r:-
-
cpe:2.3:o:totolink:a3002r_firmware:1.1.1-b20200824.0128