CVE Intelligence
Analysis AI-assisted

CVE-2025-67187: TOTOLINK A950RG Stack-based Buffer Overflow in setIpQosRules

A stack-based buffer overflow in the setIpQosRules interface of TOTOLINK A950RG firmware V4.1.2cu.5204_B20210112 is linked to insufficient length validation of the comment parameter. The record assigns a CVSS 3.1 base score of 9.8 (critical). No fixed version is listed, and no confirmed exploitation appears in the sources consulted.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

The record describes a stack-based buffer overflow (CWE-121) in the setIpQosRules interface of /lib/cste_modules/firewall.so on the TOTOLINK A950RG, firmware V4.1.2cu.5204_B20210112. The comment parameter is not properly validated for length. The entry is published in NVD and the CVE Record.

Impact

  • The recorded CVSS 3.1 base score is 9.8 (critical), with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
  • Under that vector, the attack is network-reachable, requires no privileges or user interaction, and has high confidentiality, integrity and availability impact.
  • The record does not describe the concrete consequences seen in real deployments; any impact beyond the scoring metrics is an inference.

Affected products and versions

  • Product listed: Totolink A950rg Firmware.
  • Version listed: V4.1.2cu.5204_B20210112.
  • The record lists no other affected versions or models.

Exploitation status

  • The record shows KEV listing as false. No confirmed exploitation in the wild appears in the sources consulted.
  • A third-party GitHub advisory is tagged in the record as Exploit and Third Party Advisory. That tag does not by itself confirm active exploitation, and its contents are not reproduced here.

Remediation and mitigation

  • No fixed version is listed. This does not mean no fix exists; check TOTOLINK channels for firmware updates for the A950RG.
  • Until a vendor fix is verified, reduce exposure: limit administrative access to trusted networks, keep the device management interface away from the internet, and segment routers and IoT equipment.
  • Inventory devices running the listed firmware and prioritize them by exposure.

Detection guidance

  • Review asset inventories and configuration baselines for the affected model and firmware string.
  • Monitor traffic to device management services for unusual activity, and watch for unexpected crashes or reboots of the router, which may indicate abnormal input handling.
  • Correlate perimeter logs with asset owners to identify exposed devices.

Limitations of the available information

  • The record has no fixed version, no vendor advisory text and no EPSS score, so EPSS is unknown.
  • The technical mechanism is described only at the level given in the record; exploitation details are intentionally omitted.
  • Whether other firmware versions or models are affected is unknown from the record.

Frequently asked questions

Is CVE-2025-67187 known to be actively exploited?

The record shows KEV listing as false, and no confirmed exploitation in the wild appears in the sources consulted. A third-party GitHub reference is tagged Exploit, but that tag alone does not confirm active exploitation.

Is there a fixed firmware version for the TOTOLINK A950RG?

The record lists no fixed version. That does not mean no fix exists, so check TOTOLINK for updates and reduce exposure of the management interface until a fix is verified.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.