CVE-2025-9782
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4466F8 function of /boafrm/formOneKeyAccessButton. Manipulating the submit-url argument results in buffer overflow. The attack can be initiated remotely and the exploit has been made public.
Risk Assessment
This vulnerability could allow a remote attacker to execute code or disrupt the device, posing a threat to network security. The public exploit increases the risk of exploitation.
Recommendation
Immediately update the TOTOLINK A702R firmware to the latest version or isolate the device from public networks. If updating is not possible, disable external access to the management interface.
Other vulnerabilities in TOTOLINK A702R
See all- CVE-2025-9783High
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_418030 function of /boafrm/formParentControl. Manipulating the submit-url argument leads to buffer overflow. The attack can be launched remotely and the exploit has been publicly disclosed.
- CVE-2025-9781High
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4162DC function of /boafrm/formFilter. Manipulating the ip6addr argument leads to buffer overflow. The attack can be launched remotely and the exploit has been disclosed to the public.
- CVE-2025-9780High
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_419BE0 function of /boafrm/formIpQoS. Manipulating the mac argument causes buffer overflow. The attack can be initiated remotely and the exploit has been published.
- CVE-2025-9779High
A buffer overflow vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4162DC function of /boafrm/formFilter. Manipulating the ip6addr argument results in buffer overflow. The attack can be launched remotely and the exploit is now public.
Original NVD description (English source)
A vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423. This vulnerability affects the function sub_4466F8 of the file /boafrm/formOneKeyAccessButton. Performing manipulation of the argument submit-url results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS