CVE-2025-8244 HIGH

CVE-2025-8244: TOTOLINK X15 HTTP POST Request formMapDelDevice buffer overflow

Vendor Totolink
Product X15
Weakness CWE-120
Published July 27, 2025
Last update July 28, 2025
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formMapDelDevice of the component HTTP POST Request Handler. The manipulation of the argument macstr leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

July 27, 2025 CVE published
July 28, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-1139 UTT 进取 520W ConfigExceptMSN strcpy buffer overflow CVE-2022-20885 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities CVE-2023-33023 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications CVE-2026-6014 D-Link DIR-513 POST Request formAdvanceSetup buffer overflow CVE-2026-7288 D-Link DIR-825M formVpnConfigSetup sub_4151FC buffer overflow