CVE-2025-8136: high-severity vulnerability in TOTOLINK A702R
TOTOLINK A702R HTTP POST Request formFilter buffer overflow
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 1.2%
A vulnerability, which was classified as critical, was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected is an unknown function of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
TOTOLINK · A702RRelated CVEs — TOTOLINK A702R
In the same product, most dangerous first.
CVE-2025-8140HIGHTOTOLINK A702R HTTP POST Request formWlanMultipleAP buffer overflowEPSS 11.3%CVE-2025-8138HIGHTOTOLINK A702R HTTP POST Request formOneKeyAccessButton buffer overflowEPSS 11.3%CVE-2025-6627HIGHTOTOLINK A702R HTTP POST Request formIpv6Setup buffer overflowEPSS 5.8%CVE-2025-8139HIGHTOTOLINK A702R HTTP POST Request formPortFw buffer overflowEPSS 1.2%CVE-2025-8137HIGHTOTOLINK A702R HTTP POST Request formIpQoS buffer overflowEPSS 1.2%CVE-2025-6393HIGHTOTOLINK A702R/A3002R/A3002RU/EX1200T HTTP POST Request formIPv6Addr buffer overflowEPSS 1.0%