Buffer Overflow in TOTOLINK Routers A702R, A3002R, and A3002RU

CVE-2025-4827

What is CVE-2025-4827?

A buffer overflow vulnerability exists in the TOTOLINK A702R, A3002R, and A3002RU routers, specifically within the '/boafrm/formSaveConfig' component of the HTTP POST Request Handler. This flaw arises from improper handling of the 'submit-url' argument, potentially allowing an attacker to exploit the vulnerability from a remote location. Once triggered, this vulnerability can compromise the security of the device, putting sensitive data at risk. The exploit has been publicly disclosed, increasing the urgency for users to assess their network security and apply necessary mitigations.

References