CVE-2025-4827

🗓️ 17 May 2025 14:49:29Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 39 Views🌐 WEB

Critical vulnerability in TOTOLINK A702R and A3002R allows remote buffer overflow attack via HTTP POST.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the HTTP POST Request Handler component of the /boafrm/formSaveConfig file in the microprogramming software for routers A702R, A3002R, and A3002RU allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	23 May 202500:00	–	bdu_fstec
Circl	CVE-2025-4827	17 May 202517:12	–	circl
CNNVD	TOTOLINK A720R、TOTOLINK A3002R和TOTOLINK A3002RU 安全漏洞	17 May 202500:00	–	cnnvd
Cvelist	CVE-2025-4827 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSaveConfig buffer overflow	17 May 202514:49	–	cvelist
EUVD	EUVD-2025-15585	3 Oct 202520:07	–	euvd
NVD	CVE-2025-4827	17 May 202515:15	–	nvd
OSV	CVE-2025-4827	17 May 202515:15	–	osv
Positive Technologies	PT-2025-21793 · Totolink · Totolink A702R +1	17 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-4827	19 May 202515:18	–	redhatcve
Vulnrichment	CVE-2025-4827 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSaveConfig buffer overflow	17 May 202514:49	–	vulnrichment

NVD

Node

AND

totolink a702r_firmwareMatch3.0.0-b20230809.1615

totolink a702rMatch-

Node

AND

totolink a3002r_firmwareMatch3.0.0-b20230809.1615

totolink a3002rMatch-

Node

AND

totolink a3002ru_firmwareMatch3.0.0-b20230809.1615

totolink a3002ruMatch-

[
  {
    "vendor": "TOTOLINK",
    "product": "A702R",
    "versions": [
      {
        "version": "3.0.0-B20230809.1615",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  },
  {
    "vendor": "TOTOLINK",
    "product": "A3002R",
    "versions": [
      {
        "version": "3.0.0-B20230809.1615",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  },
  {
    "vendor": "TOTOLINK",
    "product": "A3002RU",
    "versions": [
      {
        "version": "3.0.0-B20230809.1615",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
totolink	www.totolink.net/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/CH13hh/tmp_store_cc/blob/main/toto/6.md

Parameter	Position	Path	Description	CWE
submit-url	request body	/boafrm/formSaveConfig	Buffer overflow in POST /boafrm/formSaveConfig via submit-url parameter (HTTP POST Request Handler)	CWE-120, CWE-119