Buffer Overflow Vulnerability in TOTOLINK Products Impacting Remote Access

CVE-2025-4831

What is CVE-2025-4831?

A vulnerability has been identified in TOTOLINK A702R, A3002R, and A3002RU products that allows for remote exploitation via the HTTP POST Request Handler component. Specifically, manipulation of the 'submit-url' argument can lead to a buffer overflow, potentially compromising the affected device. With public disclosure of the exploit, it is crucial for organizations using these devices to implement necessary security measures to mitigate potential risks.

References