Buffer Overflow Vulnerability in TOTOLINK A702R and A3002 Series Routers

CVE-2025-4823

What is CVE-2025-4823?

A vulnerability exists in the TOTOLINK A702R, A3002R, and A3002RU routers due to a flaw in the 'submit-url' function of the HTTP POST Request Handler. This issue allows for the exploitation of a buffer overflow, enabling remote attackers to execute code or manipulate the affected devices. As the exploit has been disclosed publicly, it poses a significant risk to users of these routers, necessitating immediate attention for mitigation.

References