Buffer Overflow in TOTOLINK A702R, A3002R and A3002RU Products

CVE-2025-4834

What is CVE-2025-4834?

A vulnerability exists in certain TOTOLINK router models that allows for a buffer overflow due to improper handling of the HTTP POST request in the formSetLg function. This flaw can be exploited via remote access, enabling attackers to manipulate the submit-url argument and potentially execute arbitrary code. Public disclosure of the exploit raises risks for vulnerable systems, emphasizing the need for immediate attention and mitigation strategies.

References