What is the CVSS score of CVE-2025-5910?

CVE-2025-5910 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Ex1200t Firmware are affected by CVE-2025-5910?

A critical buffer overflow vulnerability in TOTOLIK EX1200T routers (affecting firmware versions up to 4.1.2cu.5232_B20210713) allows remote attackers to execute arbitrary code without…

Is there a public PoC exploit available for CVE-2025-5910?

Yes, a public proof-of-concept exploit is available for CVE-2025-5910. Prioritise patching immediately. EPSS: 0.4%.

How to fix or mitigate CVE-2025-5910?

Within 24 hours: Identify all TOTOLINK EX1200T devices in your environment and their firmware versions; isolate affected devices from critical network segments pending remediation. Within 7 days: Implement network-level compensating controls (WAF rules blocking malicious POST requests to /boafrm/formWsc, network segmentation restricting router access); contact TOTOLINK support for patch availability and timeline. Within 30 days: Replace affected routers with patched firmware versions once available, or implement managed replacement with alternative vendor equipment if TOTOLINK fails to release timely patches.

Ex1200t Firmware CVE-2025-5910

EUVD-2025-17616 HIGH

Buffer Overflow (CWE-119)

2025-06-10 cna@vuldb.com

Buffer Overflow TP-Link RCE Ex1200t Firmware TOTOLINK

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 19:49 euvd

EUVD-2025-17616

Analysis Generated

Mar 14, 2026 - 19:49 vuln.today

PoC Detected

Jun 16, 2025 - 17:13 vuln.today

Public exploit code

CVE Published

Jun 10, 2025 - 03:15 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWsc of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

Critical buffer overflow vulnerability in TOTOLINK EX1200T routers (firmware versions up to 4.1.2cu.5232_B20210713) affecting the HTTP POST request handler at endpoint /boafrm/formWsc. An authenticated remote attacker can exploit this vulnerability to achieve arbitrary code execution with complete system compromise (confidentiality, integrity, and availability). The vulnerability has public exploit code available and may be actively exploited in the wild.

Technical ContextAI

This vulnerability exists in the HTTP POST request handler component of TOTOLINK EX1200T WiFi routers, specifically in the /boafrm/formWsc endpoint. The vulnerability is classified as CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), a classic buffer overflow condition where insufficient input validation and bounds checking allow attackers to write data beyond allocated buffer boundaries. The affected component is part of the router's web-based management interface (likely the 'boa' HTTP server used in embedded networking devices). The vulnerable firmware versions range from base 4.1.2cu up to 5232_B20210713, suggesting this is a consumer-grade 802.11ac WiFi router with a web management portal written in C/C++ without proper memory safety mechanisms.

RemediationAI

IMMEDIATE ACTIONS: (1) Upgrade firmware to version after 4.1.2cu.5232_B20210713 if available from TOTOLINK. Check TOTOLINK support portal (totolink.net) for latest EX1200T firmware releases. (2) If no patched firmware is available, implement network segmentation: restrict HTTP/HTTPS access to router management interface to trusted internal networks only via firewall rules, disallow remote management (disable UPnP, remote admin features). (3) Change default admin credentials to strong passwords immediately. (4) Disable unnecessary services (UPnP, remote management) if not required. (5) Monitor router logs for POST requests to /boafrm/formWsc endpoint. MEDIUM-TERM: (1) Evaluate router replacement with firmware-updatable alternatives from vendors with active security patches. (2) Implement WAF rules if router is accessible from untrusted networks. (3) Apply principle of least privilege to router access. Note: TOTOLINK is known for inconsistent security patching; verify patch availability before rollout as some firmware versions may not be released publicly.