CVE-2025-9780

🗓️ 01 Sep 2025 13:02:08Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 9 Views🌐 WEB

Buffer overflow in TOTOLINK A702R via formIpQoS allows remote exploit.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-9780	1 Sep 202514:54	–	circl
CNNVD	TOTOLINK A702r 安全漏洞	1 Sep 202500:00	–	cnnvd
CNVD	TOTOLINK A702R /boafrm/formIpQoS File Buffer Overflow Vulnerability	4 Sep 202500:00	–	cnvd
Cvelist	CVE-2025-9780 TOTOLINK A702R formIpQoS sub_419BE0 buffer overflow	1 Sep 202513:02	–	cvelist
EUVD	EUVD-2025-26402	3 Oct 202520:07	–	euvd
NVD	CVE-2025-9780	1 Sep 202513:15	–	nvd
Positive Technologies	PT-2025-35484	1 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-9780	3 Sep 202513:28	–	redhatcve
Vulnrichment	CVE-2025-9780 TOTOLINK A702R formIpQoS sub_419BE0 buffer overflow	1 Sep 202513:02	–	vulnrichment

NVD

Node

totolink a702r_firmwareMatch4.0.0-b20211108.1423

AND

totolink a702rMatch-

[
  {
    "vendor": "TOTOLINK",
    "product": "A702R",
    "versions": [
      {
        "version": "4.0.0-B20211108.1423",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formIpQoS/formIpQoS.md
github	www.github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formIpQoS/formIpQoS.md
vuldb	www.vuldb.com/
totolink	www.totolink.net/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
mac	request body	/boafrm/formIpQoS	Buffer overflow in function sub_419BE0 handling mac argument in /boafrm/formIpQoS, remote exploit possible.	CWE-119, CWE-120

04 Sep 2025 16:42Current

6.8Medium risk

Vulners AI Score6.8

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00429

SSVC