[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFQj8h82oXHWA8Yth2-p1_xOJaHI3spj_LbVcVsueRXQ":3,"g5a-risk:CVE-2025-3663":152},{"success":4,"data":5,"meta":150},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":49,"epssPercentile":28,"epssTimeSeries":50,"severity":51,"affectedProducts":52,"affectedProductsCount":62,"references":63,"referencesCount":44,"weaknesses":87,"weaknessesCount":62,"isActivelyExploited":48,"cisaInfo":28,"otxData":28,"relatedBlogPosts":102,"seoMetadata":103,"configurations":128,"relatedVendorCves":141,"notableEvents":142},"CVE-2025-3663","What is CVE-2025-3663?","A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. This issue affects the function setWiFiEasyCfg\u002FsetWiFiEasyGuestCfg of the file \u002Fcgi-bin\u002Fcstecgi.cgi of the component Password Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. This issue affects the function setWiFiEasyCfg\u002Fse...","2025-04-16T03:15:17.68","2025-05-12T19:50:03.073",8.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"cna@vuldb.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":26,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","NETWORK","LOW","NONE","UNCHANGED",5.3,"MEDIUM",null,3.9,1.4,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":29,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":23,"AvailabilityImpact":35,"BaseScore":12,"BaseSeverity":35,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"HIGH",4.2,[],[39],{"Source":17,"Type":18,"CVSSData":40,"BaseSeverity":27,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":48,"ObtainAllPrivilege":48,"ObtainUserPrivilege":48,"ObtainOtherPrivilege":48,"UserInteractionRequired":48},{"Version":41,"VectorString":42,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":43,"AvailabilityImpact":24,"BaseScore":44,"BaseSeverity":45,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,"",10,2.9,false,0.11316,[49,49,49,49,49,49,49],"High",[53,58],{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"totolink","a3700r_firmware","9.1.2u.5822_b20200513","cpe:2.3:o:totolink:a3700r_firmware:9.1.2u.5822_b20200513:*:*:*:*:*:*:*",{"vendor":54,"product":59,"version":60,"criteria":61,"vulnerable":48},"a3700r","-","cpe:2.3:h:totolink:a3700r:-:*:*:*:*:*:*:*",2,[64,70,75,79,82],{"url":65,"source":66,"tags":67},"https:\u002F\u002Flavender-bicycle-a5a.notion.site\u002FTOTOLINK-A3700R-setWiFiEasyCfg-1cb53a41781f809f807efe1284f5eb1a?pvs=4","Notion",[68,69],"Exploit","Third Party Advisory",{"url":71,"source":72,"tags":73},"https:\u002F\u002Fvuldb.com\u002F?ctiid.304841","Vuldb",[74],"Permissions Required",{"url":76,"source":72,"tags":77},"https:\u002F\u002Fvuldb.com\u002F?id.304841",[69,78],"VDB Entry",{"url":80,"source":72,"tags":81},"https:\u002F\u002Fvuldb.com\u002F?submit.551295",[69,78],{"url":83,"source":84,"tags":85},"https:\u002F\u002Fwww.totolink.net\u002F","Totolink",[86],"Product",[88,96],{"id":89,"name":90,"description":91,"extendedDescription":92,"status":93,"abstraction":94,"structure":95},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",{"id":97,"name":98,"description":99,"extendedDescription":45,"status":100,"abstraction":101,"structure":95},"CWE-266","Incorrect Privilege Assignment","A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.","Draft","Base",[],{"title":104,"metaDescription":105,"keywords":106,"canonicalUrl":107,"structuredData":108},"What is CVE-2025-3663? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-3663, a high severity cyber security vulnerability from 2025. A vulnerability, which was classified as critical, has been ...","CVE-2025-3663, CVE-2025-3663 vulnerability, CVE-2025-3663 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, totolink security, a3700r_firmware vulnerability, a3700r vulnerability","\u002Fwhat-is\u002Fcve-2025-3663",{"@context":109,"@type":110,"headline":104,"description":105,"datePublished":10,"dateModified":11,"author":111,"publisher":115,"about":119,"mainEntityOfPage":123,"articleSection":126,"keywords":127},"https:\u002F\u002Fschema.org","TechArticle",{"@type":112,"name":113,"url":114},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":112,"name":113,"url":114,"logo":116},{"@type":117,"url":118},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":120,"name":6,"description":121,"additionalType":122},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":124,"@id":125},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-3663","Cybersecurity","CVE-2025-3663, CVE-2025-3663 vulnerability, CVE-2025-3663 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[129],{"Operator":130,"Negate":28,"Nodes":131},"AND",[132,137],{"Operator":133,"Negate":48,"CPEMatch":134},"OR",[135],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":136,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"C3F5D7B3-9362-4A1F-A53C-8B7DA8CAFAA0",{"Operator":133,"Negate":48,"CPEMatch":138},[139],{"Vulnerable":48,"Criteria":61,"MatchCriteriaID":140,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"05777EB4-0963-4317-AB0B-287A2140915D",[],[143],{"id":144,"eventType":145,"eventTime":146,"details":147,"label":148,"color":149},"48c4c1c1-be2b-43eb-9299-b708b46204b8","NEW_NVD","2025-04-17T02:15:28.629077+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":151,"version":41},1792358923311,{"score":153,"band":154,"action":155,"scoredAt":156},51,"Medium","Plan remediation","2026-10-16T07:06:52.806207+00:00"]