VYPR
High severity8.8NVD Advisory· Published Apr 27, 2025· Updated Jun 17, 2026

CVE-2025-3990

CVE-2025-3990

Description

A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this issue is some unknown functionality of the file /boafrm/formVlan. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

2
  • Totolink/N150RTllm-fuzzy2 versions
    3.4.0-B20190525+ 1 more
    • (no CPE)range: 3.4.0-B20190525
    • (no CPE)range: 3.4.0-B20190525

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.