CVE-2025-60699
MEDIUM
MEDIUM
Priority: 0.06
BB Relevance:
73/100
Published: 2025-11-13
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
None
I:
Low
A:
Low
Description
A buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `global.so` binary. The `getSaveConfig` function retrieves the `http_host` parameter from user input via `websGetVar` and copies it into a fixed-size stack buffer (`v13`) using `strcpy()` without performing any length checks. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted HTTP request to the router's web interface, potentially leading to arbitrary code execution.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| totolink | a950rg_firmware | 5.9c.4592_b20191022 |
References & Advisories (3)
Product
Exploit
Third Party Advisory
Broken Link