Buffer Overflow in TOTOLINK A702R and A3002R Series Routers

CVE-2025-4829

What is CVE-2025-4829?

A serious security vulnerability has been identified in TOTOLINK routers, specifically in the HTTP POST request handler function. This flaw allows an attacker to manipulate the 'submit-url' argument, leading to a buffer overflow condition. Such an exploit can be initiated remotely, putting devices at risk of compromise. It is crucial for users of the affected models, A702R, A3002R, and A3002RU, to remain vigilant and apply necessary updates or mitigations to safeguard their networks.

References