CVE-2025-67188

CRITICAL
2026-02-03 [email protected]
9.8
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

3
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
PoC Detected
Feb 10, 2026 - 14:15 vuln.today
Public exploit code
CVE Published
Feb 03, 2026 - 18:16 nvd
CRITICAL 9.8

Tags

Buffer Overflow A950rg Firmware TOTOLINK

Description

A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The issue resides in the setRadvdCfg interface of the /lib/cste_modules/ipv6.so module. The function fails to properly validate the length of the user-controlled radvdinterfacename parameter, allowing remote attackers to trigger a stack buffer overflow.

Analysis

TOTOLINK A950RG has a third buffer overflow in setRadvdCfg providing yet another RCE vector through the router's IPv6 configuration interface.

Technical Context

A CWE-120 buffer overflow in the setRadvdCfg function of TOTOLINK A950RG, the third overflow in this firmware. The RADVD configuration handles IPv6 router advertisements.

Affected Products

['TOTOLINK A950RG V4.1.2cu.5204_B20210112']

Remediation

Update firmware. All three overflows must be patched.

Priority Score

70
Low Medium High Critical
KEV: 0
EPSS: +0.6
CVSS: +49
POC: +20

Share

CVE-2025-67188 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy