CVE-2025-9783
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_418030 function of /boafrm/formParentControl. Manipulating the submit-url argument leads to buffer overflow. The attack can be launched remotely and the exploit has been publicly disclosed.
Risk Assessment
This vulnerability allows a remote attacker to potentially execute code or crash the device, compromising network security. The public availability of the exploit increases the risk.
Recommendation
Update the TOTOLINK A702R firmware to the latest version or restrict access to the management interface. Consider disabling unused features like parental control if not needed.
Other vulnerabilities in TOTOLINK A702R
See all- CVE-2025-9782High
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4466F8 function of /boafrm/formOneKeyAccessButton. Manipulating the submit-url argument results in buffer overflow. The attack can be initiated remotely and the exploit has been made public.
- CVE-2025-9781High
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4162DC function of /boafrm/formFilter. Manipulating the ip6addr argument leads to buffer overflow. The attack can be launched remotely and the exploit has been disclosed to the public.
- CVE-2025-9780High
A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_419BE0 function of /boafrm/formIpQoS. Manipulating the mac argument causes buffer overflow. The attack can be initiated remotely and the exploit has been published.
- CVE-2025-9779High
A buffer overflow vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4162DC function of /boafrm/formFilter. Manipulating the ip6addr argument results in buffer overflow. The attack can be launched remotely and the exploit is now public.
Original NVD description (English source)
A vulnerability was determined in TOTOLINK A702R 4.0.0-B20211108.1423. This issue affects the function sub_418030 of the file /boafrm/formParentControl. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS