CVE-2025-51630
Published: 17 July 2025
Summary
CVE-2025-51630 is a critical-severity Classic Buffer Overflow (CWE-120) vulnerability in Totolink N350Rt Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 39.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2025-51630 is a buffer overflow vulnerability (CWE-120) affecting the TOTOLINK N350RT router running firmware version V9.3.5u.6139_B20201216. The flaw occurs in the setIpPortFilterRules function when processing the ePort parameter, allowing excessive data to overflow buffers due to insufficient input validation. It has a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating critical severity with high impacts on confidentiality, integrity, and availability.
The vulnerability can be exploited remotely by unauthenticated attackers with network access and no user interaction required. By sending a specially crafted request targeting the ePort parameter, an attacker can trigger the buffer overflow, potentially leading to arbitrary code execution, denial of service, or full compromise of the device.
References point to a GitHub repository detailing the vulnerability and including proof-of-concept information for the ePort issue, but no official advisories, patches, or mitigation guidance from the vendor are provided in the available sources.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-21773
Vulnerability details
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in the web management function setIpPortFilterRules of the TOTOLINK N350RT router enables remote exploitation of a public-facing application.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly remediates the buffer overflow vulnerability in the setIpPortFilterRules function through flaw identification, patching, and firmware updates.
Enforces validation of the ePort parameter at the input interface to prevent buffer overflows from insufficient bounds checking on excessive data.
Implements memory protections such as stack canaries and non-executable memory to mitigate arbitrary code execution from buffer overflow exploitation.