CVE-2025-8170 | TOTOLINK T6 4.1.5cu.748_B20211015 MQTT Packet /router/meshSlaveDlfw tcpcheck_net serverIp buffer overflow

A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748_B20211015. This vulnerability affects the function tcpcheck_net of the file /router/meshSlaveDlfw of the component MQTT Packet Handler. The manipulation of the argument serverIp leads to buffer overflow.

This vulnerability was named CVE-2025-8170. The attack can be initiated remotely. Furthermore, there is an exploit available.