CVE-2025-6137 – TOTOLINK T10 HTTP POST Request Handler Buffer Overflow Vulnerability

June 16, 2025

CVE ID : CVE-2025-6137

Published : June 16, 2025, 8:15 p.m. | 1 hour, 59 minutes ago

Description : A vulnerability classified as critical has been found in TOTOLINK T10 4.1.8cu.5207. Affected is the function setWiFiScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-6138 – TOTOLINK T10 HTTP POST Request Handler Buffer Overflow

Next Article CVE-2025-6136 – Projectworlds Life Insurance Management System SQL Injection Vulnerability

Newest LF Decentralized Trust Lab HOPrS identifies if photos have been altered

Coder reimagines development environments to make them more ideal for AI agents

Report: AI coding productivity gains cancelled out by other friction points that slow developers down

15 Proven Benefits of Outsourcing Node.js Development for Large Organizations

How passkeys work: Do your favorite sites even support passkeys?

Samsung Galaxy Z Fold 7 vs. Z Fold 6: I tried both phones, and the difference is dramatic

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Owlcat Games talks to us about about WH40K: Rogue Trader, the next game ‘Dark Heresy’ — and how the studio feels about working with Xbox Game Pass

Cally – Small, feature-rich calendar components

Cally – Small, feature-rich calendar components

Working with the Command Line and WP-CLI

Access to Care Is Evolving: What Consumer Insights and Behavior Models Reveal

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Owlcat Games talks to us about about WH40K: Rogue Trader, the next game ‘Dark Heresy’ — and how the studio feels about working with Xbox Game Pass

Microsoft says ‘we have threads at home’ — rolls out feature Slack has had for years

CVE-2025-6137 – TOTOLINK T10 HTTP POST Request Handler Buffer Overflow Vulnerability

CVE-2025-3497 – Radiflow iSAP Smart Collector EOL Vulnerability

CVE-2025-3498 – Radiflow iSAP Smart Collector Unauthenticated Remote Command Execution and Configuration Modification

CVE-2025-5007 – Part-DB Profile Picture Feature Cross-Site Scripting

Enterprise AI Without GPU Burn: Salesforce’s xGen-small Optimizes for Context, Cost, and Privacy

Everything You Need to Know About CVE-2025–3248: Langflow RCE Vulnerability Explained

Wayland vs X11: progresso necessario o strategia di marketing?

The Psychology of Fonts

Track Moon Phases From Your Ubuntu Desktop With Luna

Kapitano – modern, user-friendly malware scanner

Chawan is a terminal-based web browser

CVE-2025-6137 – TOTOLINK T10 HTTP POST Request Handler Buffer Overflow Vulnerability

Related Posts