← All advisories

Medium severity5.4NVD Advisory· Published May 13, 2025· Updated Jun 17, 2026

CVE-2025-45866

CVE-2025-45866

Description

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s interface.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Totolink/A3002r Firmware
cpe:2.3:o:totolink:a3002r_firmware:4.0.0-b20230531.1404:*:*:*:*:*:*:*
Totolink/A3002RUcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: v4.0.0-B20230531.1404

Patches

Vulnerability mechanics

References

2

github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/9/overflow.mdnvdExploitThird Party Advisory
www.totolink.net/home/menu/detail/menu_listtpl/download/id/258/ids/36.htmlnvdProduct

News mentions

0

No linked articles in our index yet.