CVE-2025-25609: Totolink a3002r Firmware

High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days.

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_ipv6 parameter in the formIpv6Setup interface of /bin/boa

Affected products

• Totolink a3002r Firmware: version 1.1.1-b20200824.0128 only

Published 2025-02-28. Last modified 2026-06-17.