CVE-2025-4833: falha de alta gravidade em TOTOLINK A702R
TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formNtp buffer overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.9%
A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This issue affects some unknown processing of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVEs relacionadas — TOTOLINK A702R
No mesmo produto, das mais perigosas para as menos.
CVE-2025-8140HIGHTOTOLINK A702R HTTP POST Request formWlanMultipleAP buffer overflowEPSS 11.3%CVE-2025-8138HIGHTOTOLINK A702R HTTP POST Request formOneKeyAccessButton buffer overflowEPSS 11.3%CVE-2025-6485MEDIUMTOTOLINK A3002R formWlSiteSurvey os command injectionEPSS 9.3%CVE-2025-6627HIGHTOTOLINK A702R HTTP POST Request formIpv6Setup buffer overflowEPSS 5.8%CVE-2025-8136HIGHTOTOLINK A702R HTTP POST Request formFilter buffer overflowEPSS 1.2%CVE-2025-8139HIGHTOTOLINK A702R HTTP POST Request formPortFw buffer overflowEPSS 1.2%