CVE-2025-60699: totolink a950rg_firmware Stack-based Buffer Overflow

Vulnerability summary

CVE-2025-60699 is a medium (CVSS 6.5) Stack-based Buffer Overflow vulnerability in totolink a950rg_firmware. EPSS estimates a 0.90% chance of exploitation in the next 30 days, higher than 59.2% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 13-11-2025
   PublishedVulnerability first disclosed.
2. 14-11-2025
   Last modifiedVulnerability information updated.

Description

A buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `global.so` binary. The `getSaveConfig` function retrieves the `http_host` parameter from user input via `websGetVar` and copies it into a fixed-size stack buffer (`v13`) using `strcpy()` without performing any length checks. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted HTTP request to the router's web interface, potentially leading to arbitrary code execution.

• CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).