EUVD-2025-17104
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3Description
A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part of the file /boafrm/formSaveConfig of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Analysis
A critical buffer overflow vulnerability exists in TOTOLINK X15 firmware version 1.0.0-B20230714.1105, affecting the HTTP POST request handler in the /boafrm/formSaveConfig endpoint. An authenticated attacker can exploit the unsanitized 'submit-url' parameter to trigger a buffer overflow, potentially achieving remote code execution with full system compromise (confidentiality, integrity, and availability impact). The vulnerability has been publicly disclosed with exploit proof-of-concept available, creating immediate real-world risk.
Technical Context
This vulnerability resides in the HTTP POST request handling mechanism of TOTOLINK X15 router firmware, specifically within the /boafrm/formSaveConfig component. The root cause is classified as CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), a classic buffer overflow weakness. The 'submit-url' parameter lacks proper input validation and buffer boundary checks, allowing an attacker to write beyond allocated memory regions. The affected component processes user-supplied configuration data without adequate length validation, enabling stack or heap corruption depending on the memory layout. The vulnerability affects TOTOLINK X15 devices running firmware build B20230714.1105, which likely represents a residential Wi-Fi router or mesh system commonly deployed in home and small business networks.
Affected Products
X15 (['1.0.0-B20230714.1105'])
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today