Buffer Overflow Vulnerability in TOTOLINK A702R, A3002R, and A3002RU Devices

CVE-2025-4835

What is CVE-2025-4835?

A critical vulnerability has been identified in the TOTOLINK A702R, A3002R, and A3002RU devices, specifically within the HTTP POST Request Handler. This issue stems from improper handling of the 'redirect-url' argument within the file /boafrm/formWlanRedirect, leading to a buffer overflow. Remote attackers can exploit this vulnerability to execute arbitrary code, potentially compromising the device's security. It is essential for users to apply necessary patches and updates to safeguard their systems from potential exploits, as the details have been publicly disclosed.

References