CVE-2025-7913 | TOTOLINK T6 4.1.5cu.748_B20211015 MQTT Service updateWifiInfo serverIp buffer overflow

A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. Affected is the function updateWifiInfo of the component MQTT Service. The manipulation of the argument serverIp leads to buffer overflow.

This vulnerability is traded as CVE-2025-7913. It is possible to launch the attack remotely. Furthermore, there is an exploit available.