What is the CVSS score of CVE-2025-5793?

CVE-2025-5793 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Ex1200t Firmware are affected by CVE-2025-5793?

A critical remote code execution vulnerability affects TOTOLIK EX1200T routers (model 4.1.2cu.5232_B20210713), allowing unauthenticated attackers to execute arbitrary commands through a buffer…

Is there a public PoC exploit available for CVE-2025-5793?

Yes, a public proof-of-concept exploit is available for CVE-2025-5793. Prioritise patching immediately. EPSS: 0.4%.

How to fix or mitigate CVE-2025-5793?

Within 24 hours: Identify and inventory all TOTOLIK EX1200T devices in your environment and isolate them from critical networks if possible. Within 7 days: Check TOTOLIK's website for security patches or firmware updates; if unavailable, implement network-level mitigations (see compensating controls). Within 30 days: Evaluate replacement with a patched router model and develop a vendor communication plan to ensure timely updates for future vulnerabilities.

Ex1200t Firmware CVE-2025-5793

EUVD-2025-17349 HIGH

Buffer Overflow (CWE-119)

2025-06-06 cna@vuldb.com

Buffer Overflow TP-Link RCE Ex1200t Firmware TOTOLINK

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 18:10 euvd

EUVD-2025-17349

Analysis Generated

Mar 14, 2026 - 18:10 vuln.today

PoC Detected

Jun 12, 2025 - 16:20 vuln.today

Public exploit code

CVE Published

Jun 06, 2025 - 18:15 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an unknown function of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

A critical buffer overflow vulnerability exists in TOTOLINK EX1200T firmware version 4.1.2cu.5232_B20210713 in the HTTP POST request handler for the /boafrm/formPortFw endpoint. An authenticated attacker can exploit this by manipulating the 'service_type' parameter to achieve remote code execution with high impact to confidentiality, integrity, and availability (CVSS 8.8). Public exploits are available, making this an active threat.

Technical ContextAI

The vulnerability resides in the TOTOLINK EX1200T wireless router's embedded HTTP server (boafrm component), specifically in the formPortFw request handler. The root cause is classified as CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), a classic buffer overflow flaw where user-supplied input to the 'service_type' parameter is not properly validated before being written to a fixed-size buffer. The HTTP POST request handler processes form data without adequate bounds checking, allowing an attacker to overflow the stack or heap and overwrite adjacent memory. This affects the CPE context: cpe:2.3:o:totolink:ex1200t_firmware:4.1.2cu.5232_b20210713:*:*:*:*:*:*:*

RemediationAI

Check TOTOLINK's support page for EX1200T firmware updates released after July 2021. Apply the latest firmware version available.; priority: CRITICAL Workaround (Temporary): Restrict network access to the router's management interface (/boafrm/formPortFw) using firewall rules or access control lists. Limit HTTP POST requests to trusted IP addresses only.; priority: HIGH; note: This is a temporary measure only; patching is required. Mitigation: Disable remote management of the router if not required. Change default credentials immediately and use strong, unique passwords to reduce successful authentication exploitation.; priority: MEDIUM Vendor Advisory: Contact TOTOLINK support or check their security advisory page for official patches. Monitor TOTOLINK security bulletins for EX1200T firmware updates.; note: Specific patch version numbers should be verified against vendor releases.