CVE-2025-67188: TOTOLINK A950RG Stack Buffer Overflow in setRadvdCfg
The record describes a stack buffer overflow in the setRadvdCfg interface of the ipv6.so module in TOTOLINK A950RG firmware V4.1.2cu.5204_B20210112, caused by missing length validation of the radvdinterfacename parameter. The CNA-supplied CVSS 3.1 base score is 9.8 (critical), and the CVE is not listed in CISA KEV. No fixed version appears in the record, so affected devices should be inventoried and exposure reduced while the vendor status is checked.
Overview The record describes a buffer overflow in the setRadvdCfg interface of the /lib/cste_modules/ipv6.so module in TOTOLINK A950RG firmware V4.1.2cu.5204_B20210112. According to the record, the user-controlled radvdinterfacename parameter is not length-checked, which can lead to a stack buffer overflow classified as CWE-120 (Classic Buffer Overflow). ## Impact The record states that remote attackers can trigger the stack buffer overflow. The CVSS 3.1 base score in the record is 9.8 (critical), with a network attack vector, low complexity, no privileges required and no user interaction, and high impact on confidentiality, integrity and availability. The real-world consequences on deployed devices were not verified in the sources consulted. ## Affected products and versions - Product: TOTOLINK A950RG firmware - Version listed: V4.1.2cu.5204_B20210112 - The record lists only this version string and gives no range of affected versions. ## Exploitation status CISA KEV does not list this CVE in the record, and no confirmed exploitation in the wild appears in the sources consulted. The record references a third-party GitHub advisory tagged as exploit-related, which indicates that public technical material exists; its contents are not reproduced here. ## Remediation and mitigation - The record lists no fixed version. The absence of a listed fix does not mean none exists, so check official TOTOLINK channels for firmware updates. - Restrict access to device management and configuration interfaces to trusted networks only. - Avoid exposing the device directly to untrusted networks and segment router and IoT equipment from sensitive systems. - If the device is not required, retire it or replace it with a model that receives security updates. ## Detection guidance - Inventory TOTOLINK A950RG devices and confirm the installed firmware version. - Review device and network logs for unexpected restarts, crashes or unusual configuration activity. - Monitor traffic reaching management interfaces from unexpected sources. ## Limitations of the available information The record has no vendor advisory, no fixed version, no EPSS or SSVC data, and no confirmed exploitation status beyond the absence of a KEV listing. It is unknown whether other firmware versions are affected or whether a patch exists. The description and CVSS values were taken from the record and were not independently verified.
Frequently asked questions
Is CVE-2025-67188 being actively exploited?
The record does not list this CVE in CISA KEV, and no confirmed exploitation in the wild appears in the sources consulted. A third-party GitHub advisory tagged as exploit-related is referenced, so public technical material exists.
What should administrators do if no fixed version is listed?
Check official TOTOLINK channels for firmware updates, restrict management interface access to trusted networks, avoid direct exposure to untrusted networks, and consider retiring the device if it is not needed.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.