Buffer Overflow Vulnerability in TOTOLINK Routers

CVE-2025-4830

What is CVE-2025-4830?

A buffer overflow vulnerability has been identified in the HTTP POST Request Handler of TOTOLINK A702R, A3002R, and A3002RU models. This issue arises from the manipulation of the 'submit-url' argument within the /boafrm/formSysCmd file, allowing an attacker to potentially exploit the device remotely. Given the public disclosure of this exploit, it is crucial for users to review their device security and apply necessary updates or mitigations.

References