CNNVD-202506-3094 Information

Jun 24, 2025 cve

CNNVD ID

CNNVD-202506-3094

CVE-2025-6568

CNNVD Published: 2025-06-24

Description (Chinese)

TOTOLINK EX1200T是中国吉翁电子（TOTOLINK）公司的一款 Wi-Fi 范围扩展器。 TOTOLINK EX1200T 4.1.2cu.5232_B20210713版本存在安全漏洞，该漏洞源于HTTP POST请求处理程序对参数submit-url处理不当，可能导致缓冲区溢出。

Description (English)

TOTOLINK EX1200T is a Wi-Fi range extension of the Chinese company TOTOLINK. TOTOLINK EX1200T 4.1.2cu5232 B20210713 has a security loophole, which stems from the improper handling of the parameters submit-url by HTTP POST ’ s request for processing procedures, which may lead to spills in the buffer zone.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

头歌

Published

2025-06-24

Last Modified

2026-02-24

References

https://www.totolink.net/ https://github.com/d2pq/cve/blob/main/616/23.md https://github.com/d2pq/cve/blob/main/616/23.md#poc https://vuldb.com/?ctiid.313740 https://vuldb.com/?submit.601344 https://vuldb.com/?id.313740 https://access.redhat.com/security/cve/cve-2025-6568

Share on: