Listen to this Post
How the CVE Works
The vulnerability in TOTOLINK EX1200T (up to v4.1.2cu.5232_B20210713) stems from improper bounds checking in the `/boafrm/formFilter` HTTP POST request handler. Attackers can trigger a buffer overflow by sending crafted oversized payloads, leading to arbitrary code execution or device crashes. The flaw is remotely exploitable without authentication, and public exploit PoCs exist.
DailyCVE Form
Platform: TOTOLINK EX1200T
Version: ≤4.1.2cu.5232_B20210713
Vulnerability: Buffer Overflow
Severity: Critical
Date: 06/16/2025
Prediction: Patch by 07/15/2025
What Undercode Say
Analytics
curl -X POST -d "payload=$(python -c 'print("A"2000)')" http://<TARGET>/boafrm/formFilter
import requests
requests.post("http://<TARGET>/boafrm/formFilter", data={"data": "A"2048})
Exploit
- Craft oversized HTTP POST request to
/boafrm/formFilter. - Overwrite return address to hijack execution flow.
Protection from this CVE
- Disable WAN access to admin interface.
- Await vendor firmware update.
Impact
- Remote code execution.
- Device compromise.
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
