CVE-2025-9303

🗓️ 21 Aug 2025 14:32:07Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 11 Views🌐 WEB

CVE-2025-9303 remote buffer overflow Totolink A720R via setParentalRules in cstecgi.cgi public exploit

Reporter	Title	Published	Views	Family All 8
CNNVD	TOTOLINK A720R 安全漏洞	21 Aug 202500:00	–	cnnvd
CNVD	TOTOLINK A702R Buffer Overflow Vulnerability	26 Aug 202500:00	–	cnvd
Cvelist	CVE-2025-9303 TOTOLINK A720R cstecgi.cgi setParentalRules buffer overflow	21 Aug 202514:32	–	cvelist
EUVD	EUVD-2025-25432	3 Oct 202520:07	–	euvd
NVD	CVE-2025-9303	21 Aug 202515:15	–	nvd
Positive Technologies	PT-2025-34228 · Totolink · Totolink A720R	21 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-9303	23 Aug 202515:10	–	redhatcve
Vulnrichment	CVE-2025-9303 TOTOLINK A720R cstecgi.cgi setParentalRules buffer overflow	21 Aug 202514:32	–	vulnrichment

NVD

Node

totolink a720r_firmwareMatch4.1.5cu.630_b20250509

AND

totolink a720rMatch-

[
  {
    "vendor": "TOTOLINK",
    "product": "A720R",
    "versions": [
      {
        "version": "4.1.5cu.630_B20250509",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/lin-3-start/lin-cve/blob/main/TOTOLINK%20A720R/TOTOLINK-A720R.md
vuldb	www.vuldb.com/
totolink	www.totolink.net/
github	www.github.com/lin-3-start/lin-cve/blob/main/TOTOLINK%20A720R/TOTOLINK-A720R.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
desc	request body	/cgi-bin/cstecgi.cgi	Buffer overflow via manipulation of the desc argument in setParentalRules on /cgi-bin/cstecgi.cgi	CWE-119, CWE-120

06 Oct 2025 18:48Current

7.4High risk

Vulners AI Score7.4

CVSS 3.18.8 - 9.8

CVSS 48.7

CVSS 29

CVSS 38.8

EPSS0.00807

SSVC