Buffer Overflow Vulnerability in TOTOLINK A702R HTTP POST Handler
CVE-2025-6147

8.8HIGH

Key Information:

Vendor

TOTOLINK
Status
A702R
Vendor
CVE Published:
17 June 2025

What is CVE-2025-6147?

A critical vulnerability has been identified in the TOTOLINK A702R, specifically in the HTTP POST Request Handler located in the /boafrm/formSysLog file. This vulnerability allows an attacker to manipulate the 'submit-url' argument, leading to a buffer overflow condition that can be exploited remotely. Given its public disclosure, organizations utilizing this product should assess their exposure and implement necessary security measures to mitigate potential exploits.

References

https://github.com/Lena-lyy/cve/blob/main/4.md
https://github.com/Lena-lyy/cve/blob/main/4.md#poc
https://vuldb.com/?ctiid.312622

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2025-6147 : Buffer Overflow Vulnerability in TOTOLINK A702R HTTP POST Handler