CVE-2025-7913
BaseFortify
Publication date: 2025-07-21
Last updated on: 2025-07-23
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| totolink | t6_firmware | v4.1.5cu.748_b20211015 |
| totolink | t6 | 3 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-7913 is a critical buffer overflow vulnerability in the TOTOLINK T6 router firmware version 4.1.5cu.748_B20211015. It occurs in the MQTT Service component's function updateWifiInfo, where the serverIp argument is copied into a fixed-size buffer without proper length validation. This improper handling allows an attacker to overflow the buffer, potentially overwriting the stack's return address and enabling remote code execution on the device. [1, 2]
How can this vulnerability impact me? :
This vulnerability can be exploited remotely to execute arbitrary code on the affected TOTOLINK T6 router. This compromises the device's confidentiality, integrity, and availability, potentially allowing attackers to take full control of the router, disrupt network services, intercept or manipulate data, and use the device as a foothold for further attacks. [1, 2]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by scanning for the TOTOLINK T6 router running firmware version 4.1.5cu.748_B20211015 with the MQTT service active on port 1883. You can use network scanning tools like nmap to detect devices with port 1883 open, for example: `nmap -p 1883 --open <target-ip-range>`. Additionally, monitoring MQTT traffic for suspicious or malformed packets targeting the updateWifiInfo function could help detect exploitation attempts. However, no specific detection commands or signatures are provided in the available resources. [1, 2]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include discontinuing use of the affected TOTOLINK T6 router firmware version 4.1.5cu.748_B20211015, as no known mitigations or patches currently exist. It is recommended to replace the affected device with an alternative product. Additionally, restricting network access to the MQTT service port 1883 from untrusted networks and monitoring for suspicious activity can help reduce risk until a fix is available. [2]