Skip to content
COOEY

EXPOSURES › CVE-2025-12240

CVE-2025-12240

HIGH
DETAIL
SourceNVD · cve Published2025-10-27 CVSS8.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-12240 ↗

▸ RECOMMENDED ACTION  Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED
totolink · vendora3300r · producta3300r firmware · product
DESCRIPTION

A security vulnerability has been detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.