{"id":51184,"date":"2025-06-11T21:28:55","date_gmt":"2025-06-11T21:28:55","guid":{"rendered":""},"modified":"2025-10-01T23:02:20","modified_gmt":"2025-10-02T05:02:20","slug":"cve-2025-5671-critical-buffer-overflow-vulnerability-in-totolink-n302r-plus-http-post-request-handler","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-5671-critical-buffer-overflow-vulnerability-in-totolink-n302r-plus-http-post-request-handler\/","title":{"rendered":"CVE-2025-5671: Critical Buffer Overflow Vulnerability in TOTOLINK N302R Plus HTTP POST Request Handler<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

A critical vulnerability, tagged as CVE-2025-5671, has been detected in TOTOLINK N302R Plus versions up to 3.4.0-B20201028. This critical flaw resides in an unknown function of the file \/boafrm\/formPortFw of the HTTP POST Request Handler component. The vulnerability can lead to potential system compromise or data<\/a> leakage, posing a significant risk to users and organizations utilizing the TOTOLINK N302R Plus. Given the severity and the public disclosure of the exploit, it’s crucial for users to understand the implications of this security flaw<\/a> and how to mitigate it.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-5671
\nSeverity: Critical, CVSS score 8.8
\nAttack Vector: Remote
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system compromise or data<\/a> leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n