Buffer Overflow Vulnerability in TOTOLINK A702R, A3002R and A3002RU Devices

CVE-2025-4824

What is CVE-2025-4824?

A buffer overflow vulnerability has been identified in TOTOLINK A702R, A3002R, and A3002RU devices, specifically in the /boafrm/formWsc component related to the HTTP POST request handler. This vulnerability allows an attacker to manipulate the 'submit-url' argument, potentially leading to unauthorized access and control over the affected devices. Importantly, this exploit can be executed remotely, making it a significant risk for users and requiring immediate attention to ensure device security.

References