CVE-2025-3988

8.7 highEPSS 1.5%

High (8.7) in totolink n150rt firmware. EPSS 1.5% chance of exploitation in the next 30 days.

A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected is an unknown function of the file /boafrm/formPortFw. The manipulation of the argument service_type leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWEs: CWE-120, CWE-119
Published: 2025-04-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

totolink:n150rt_firmware

References

https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/BufferOverflow_formPortFw
https://vuldb.com/?ctiid.306324
https://vuldb.com/?id.306324
https://vuldb.com/?submit.557939
https://www.totolink.net/

Check your stack JSON