CVE-2025-9782

🗓️ 01 Sep 2025 14:02:07Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 23 Views🌐 WEB

CVE-2025-9782 on TOTOLINK A702R causes buffer overflow in Form Key Button when submit parameter is manipulated.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-9782	1 Sep 202517:34	–	circl
CNNVD	TOTOLINK A702r 安全漏洞	1 Sep 202500:00	–	cnnvd
CNVD	TOTOLINK A702R /boafrm/formOneKeyAccessButton File Buffer Overflow Vulnerability	4 Sep 202500:00	–	cnvd
Cvelist	CVE-2025-9782 TOTOLINK A702R formOneKeyAccessButton sub_4466F8 buffer overflow	1 Sep 202514:02	–	cvelist
EUVD	EUVD-2025-26344	3 Oct 202520:07	–	euvd
NVD	CVE-2025-9782	1 Sep 202514:15	–	nvd
OSV	CVE-2025-9782	1 Sep 202514:15	–	osv
Positive Technologies	PT-2025-35488	1 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-9782	3 Sep 202514:33	–	redhatcve
Vulnrichment	CVE-2025-9782 TOTOLINK A702R formOneKeyAccessButton sub_4466F8 buffer overflow	1 Sep 202514:02	–	vulnrichment

NVD

Node

AND

totolink a702r_firmwareMatch4.0.0-b20211108.1423

totolink a702rMatch-

[
  {
    "vendor": "TOTOLINK",
    "product": "A702R",
    "versions": [
      {
        "version": "4.0.0-B20211108.1423",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formOneKeyAccessButton/formOneKeyAccessButton.md
vuldb	www.vuldb.com/
totolink	www.totolink.net/
vuldb	www.vuldb.com/
github	www.github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formOneKeyAccessButton/formOneKeyAccessButton.md
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
submit-url	request body	/boafrm/formOneKeyAccessButton	Buffer overflow vulnerability via manipulation of the submit-url parameter in the /boafrm/formOneKeyAccessButton endpoint.	CWE-120, CWE-119

17 Jun 2026 10:09Current

6.9Medium risk

Vulners AI Score6.9

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00598

SSVC