Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-45787: TOTOLINK A3100R Router: Unsecured Data Exposure

CVE-2025-45787 · published 1 year ago

Summary

The TOTOLINK A3100R router's software has a flaw that can allow hackers to access and steal sensitive data. This happens when the router's settings are misconfigured or poorly secured. To protect your network, update the router's software to the latest version.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
totolink	a3100r_firmware	5.9c.1527 `cpe:2.3:o:totolink:a3100r_firmware:5.9c.1527:::::::*`

Original advisory text

TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules.

References

https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/tree/main/ToTolink/A3... Exploit

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

9.8 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-787Out-of-bounds Write

CWE-121Stack-based Buffer Overflow

Timeline

Published8 May 2025

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2025-45787 · NVD

Track software like this

Free during beta