CVE-2025-22903

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the pin parameter in the function setWiFiWpsConfig.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-121

Affected software

No affected versions have been published.

Timeline

Published
Apr 15, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-229049.8RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.CVE-2025-229059.8RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp.CVE-2025-229069.8RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN.CVE-2025-229079.8RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function.CVE-2025-22919.8Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attaCVE-2025-229115.6RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formiNICbasicREP function.CVE-2025-229129.8RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.CVE-2025-229139.8RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function.CVE-2025-229169.8RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function.CVE-2025-229175.4A reflected cross-site scripting (XSS) vulnerability in Audemium ERP <=0.9.0 allows remote attackers to execute an arbitrary JavaScript paylCVE-2025-229187.5Polycom RealPresence Group 500 <=20 has Insecure Permissions due to automatically loaded cookies. This allows for the use of administrator fCVE-2025-229196.5A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (DoS) via opening a cra
CVE-2025-22903: Medium severity, CVSS 4.6 | Vulnix