Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:x15_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductX15 Firmware (2accd252-0d91-5f4d-9d50-2a47b1ce63ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6824 vulnerable 2026-06-08 07:43:16.501351 TOTOLINK X15 HTTP POST Request formParentControl buffer overflow
HIGH (8.8)
A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-28T20:00:17.046Z
Updated: 2025-06-30T15:57:14.695Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.