Totolink X15 Firmware
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Totolink X15 Firmware.
By the Year
In 2026 there have been 0 vulnerabilities in Totolink X15 Firmware. Last year, in 2025 X15 Firmware had 25 security vulnerabilities published. Right now, X15 Firmware is on track to have less security vulnerabilities in 2026 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 25 | 8.07 |
It may take a day or so for new X15 Firmware vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Totolink X15 Firmware Security Vulnerabilities
TOTOLINK X15 RCE via buffer overflow in /boafrm/formMultiAPVLAN
CVE-2025-8245
7.5 - High
- July 27, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAPVLAN of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 1.0.0 Buffer Overflow RCE via /boafrm/formRoute
CVE-2025-8246
7.5 - High
- July 27, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formRoute of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 Buffer Overflow /boafrm/formMapDel 1.0.0-B20230714.1105
CVE-2025-8243
7.5 - High
- July 27, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Memory Corruption
TOTOLINK X15 1.0.0-B20230714 RCE via HTTP POST Buffer Overflow
CVE-2025-8244
9.8 - Critical
- July 27, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formMapDelDevice of the component HTTP POST Request Handler. The manipulation of the argument macstr leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Command Injection
TOTOLINK X15 1.0.0-B20230714 Buffer Overflow in HTTP POST Handler
CVE-2025-8242
7.5 - High
- July 27, 2025
A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr/url/vpnPassword/vpnUser leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 1.0.0-B20230714.1105 buffer overflow in HTTP POST handler
CVE-2025-6824
7.5 - High
- June 28, 2025
A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Classic Buffer Overflow
TOTOLINK X15 HTTP POST Handler Buffer Overflow in /boafrm/formIpv6Setup
CVE-2025-6402
8.8 - High
- June 21, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formIpv6Setup of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 1.0.0-B20230714.1105 Critical HTTP POST Handler Buffer Overflow
CVE-2025-6399
8.8 - High
- June 21, 2025
A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 1.0.0: Critical Buffer Overflow in HTTP POST Request Handler
CVE-2025-6165
8.8 - High
- June 17, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formTmultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 1.0.0-B20230714.1105 HTTP POST Buffer Overflow
CVE-2025-6150
8.8 - High
- June 17, 2025
A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 1.0.0-B20230714 Buffer Overflow in /boafrm/formSysLog
CVE-2025-6146
8.8 - High
- June 17, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. This affects an unknown part of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
Crit buffer overflow in TOTOLINK X15 1.0.0-B20230714.1105 /boafrm/formIpQoS
CVE-2025-5790
6.5 - Medium
- June 06, 2025
A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. This vulnerability affects unknown code of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 v1.0.0-B20230714.1105: HTTP POST service_type buffer overflow
CVE-2025-5789
6.5 - Medium
- June 06, 2025
A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 1.0.0 B20230714.1105 Buffer Overflow in HTTP POST /boafrm/formDMZ
CVE-2025-5786
6.5 - Medium
- June 06, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formDMZ of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
Critical buffer overflow in TOTOLINK X15 POST handler (1.0.0-B20230714.1105)
CVE-2025-5787
6.5 - Medium
- June 06, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWsc of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 1.0.0 Buffer Overflow in HTTP POST Request Handler
CVE-2025-5788
6.5 - Medium
- June 06, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formReflashClientTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 1.0.0 Buffer Overflow in HTTP POST Handler
CVE-2025-5785
6.5 - Medium
- June 06, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
Critical Buffer Overflow in TOTOLINK X15 1.0 HTTP POST /boafrm/formDosCfg
CVE-2025-5737
8.8 - High
- June 06, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 1.0.0-B20230714 buffer overflow in /boafrm/formStats HTTP POST
CVE-2025-5738
8.8 - High
- June 06, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
Buffer Overflow in HTTP POST Handler of TOTOLINK X15 1.0.0-B20230714.1105
CVE-2025-5739
8.8 - High
- June 06, 2025
A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part of the file /boafrm/formSaveConfig of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 1.0.0-B20230714.1105 Buffer Overflow via HTTP POST redirect-url
CVE-2025-5734
8.8 - High
- June 06, 2025
A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 1.0.0 Buffer Overflow via submit-url in HTTP POST Handler (Remote)
CVE-2025-5735
8.8 - High
- June 06, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formSetLg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 1.0.0-B20230714.1105 Remote Buffer Overflow in /boafrm/formNtp
CVE-2025-5736
8.8 - High
- June 06, 2025
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
TOTOLINK X15 1.0.0-B20230714.1105: Remote Stack Buffer Overflow via formMapReboot
CVE-2025-5503
8.8 - High
- June 03, 2025
A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. This affects the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Memory Corruption
TOTOLINK X15 1.0.0 CMD INJECT via formMapReboot - Critical Remote
CVE-2025-5502
9.8 - Critical
- June 03, 2025
A vulnerability, which was classified as critical, has been found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this issue is the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Memory Corruption
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Totolink X15 Firmware or by Totolink? Click the Watch button to subscribe.
