CVE-2025-4823

HIGH

TOTOLINK A702R, A3002R, A3002RU 3.0.0-B20230809.1615 - Buffer Overflow

Title source: llm
STIX 2.1

Description

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is the function submit-url of the file /boafrm/formReflashClientTbl of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.309284
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.309284
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.574593
Product product
https://www.totolink.net/

Scores

CVSS v3 8.8
EPSS 0.0098
EPSS Percentile 76.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-119 CWE-120
Status published
Products (3)
totolink/a3002r_firmware 3.0.0-b20230809.1615
totolink/a3002ru_firmware 3.0.0-b20230809.1615
totolink/a702r_firmware 3.0.0-b20230809.1615
Published May 17, 2025
Tracked Since Feb 18, 2026