CVE-2025-9780
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_419BE0 function of /boafrm/formIpQoS. Manipulating the mac argument causes buffer overflow. The attack can be initiated remotely and the exploit has been published.
Risk Assessment
This vulnerability could allow a remote attacker to execute code or disrupt the device, posing a threat to network security. The public exploit increases the risk of exploitation.
Recommendation
Immediately update the TOTOLINK A702R firmware to the latest version or isolate the device from public networks. If updating is not possible, disable external access to the management interface.
Other vulnerabilities in TOTOLINK A702R
See all- CVE-2025-9783High
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_418030 function of /boafrm/formParentControl. Manipulating the submit-url argument leads to buffer overflow. The attack can be launched remotely and the exploit has been publicly disclosed.
- CVE-2025-9782High
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4466F8 function of /boafrm/formOneKeyAccessButton. Manipulating the submit-url argument results in buffer overflow. The attack can be initiated remotely and the exploit has been made public.
- CVE-2025-9781High
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4162DC function of /boafrm/formFilter. Manipulating the ip6addr argument leads to buffer overflow. The attack can be launched remotely and the exploit has been disclosed to the public.
- CVE-2025-9779High
A buffer overflow vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4162DC function of /boafrm/formFilter. Manipulating the ip6addr argument results in buffer overflow. The attack can be launched remotely and the exploit is now public.
Original NVD description (English source)
A flaw has been found in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this issue is the function sub_419BE0 of the file /boafrm/formIpQoS. This manipulation of the argument mac causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS