Buffer Overflow in TOTOLINK A3002R and A3002RU HTTP POST Request Handler
CVE-2025-4732
8.7HIGH
Key Information:
Badges
👾 Exploit Exists
What is CVE-2025-4732?
A buffer overflow vulnerability has been identified in the HTTP POST Request Handler of TOTOLINK A3002R and A3002RU routers. The issue lies in the manipulation of the 'ip6addr' argument within the /boafrm/formFilter file, allowing attackers to execute malicious remote commands. Given the exploit has been publicly disclosed, it is crucial for users to apply updates or mitigate the associated risks promptly.
Affected Version(s)
A3002R 3.0.0-B20230809.1615
A3002RU 3.0.0-B20230809.1615