CVE-2025-9781
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4162DC function of /boafrm/formFilter. Manipulating the ip6addr argument leads to buffer overflow. The attack can be launched remotely and the exploit has been disclosed to the public.
Risk Assessment
This vulnerability allows a remote attacker to potentially execute code or crash the device, compromising network security. The public availability of the exploit increases the risk.
Recommendation
Update the TOTOLINK A702R firmware to the latest version or restrict access to the management interface. Consider disabling the filtering feature if not in use.
Other vulnerabilities in TOTOLINK A702R
See all- CVE-2025-9783High
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_418030 function of /boafrm/formParentControl. Manipulating the submit-url argument leads to buffer overflow. The attack can be launched remotely and the exploit has been publicly disclosed.
- CVE-2025-9782High
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4466F8 function of /boafrm/formOneKeyAccessButton. Manipulating the submit-url argument results in buffer overflow. The attack can be initiated remotely and the exploit has been made public.
- CVE-2025-9780High
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_419BE0 function of /boafrm/formIpQoS. Manipulating the mac argument causes buffer overflow. The attack can be initiated remotely and the exploit has been published.
- CVE-2025-9779High
A buffer overflow vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4162DC function of /boafrm/formFilter. Manipulating the ip6addr argument results in buffer overflow. The attack can be launched remotely and the exploit is now public.
Original NVD description (English source)
A vulnerability has been found in TOTOLINK A702R 4.0.0-B20211108.1423. This affects the function sub_4162DC of the file /boafrm/formFilter. Such manipulation of the argument ip6addr leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS