CVE-2025-9782

🗓️ 01 Sep 2025 14:02:07Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 11 Views🌐 WEB

CVE-2025-9782 on TOTOLINK A702R causes buffer overflow in Form Key Button when submit parameter is manipulated.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-9782	1 Sep 202517:34	–	circl
CNNVD	TOTOLINK A702r 安全漏洞	1 Sep 202500:00	–	cnnvd
CNVD	TOTOLINK A702R /boafrm/formOneKeyAccessButton File Buffer Overflow Vulnerability	4 Sep 202500:00	–	cnvd
Cvelist	CVE-2025-9782 TOTOLINK A702R formOneKeyAccessButton sub_4466F8 buffer overflow	1 Sep 202514:02	–	cvelist
EUVD	EUVD-2025-26344	3 Oct 202520:07	–	euvd
NVD	CVE-2025-9782	1 Sep 202514:15	–	nvd
Positive Technologies	PT-2025-35488	1 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-9782	3 Sep 202514:33	–	redhatcve
Vulnrichment	CVE-2025-9782 TOTOLINK A702R formOneKeyAccessButton sub_4466F8 buffer overflow	1 Sep 202514:02	–	vulnrichment

NVD

Node

totolink a702r_firmwareMatch4.0.0-b20211108.1423

AND

totolink a702rMatch-

[
  {
    "vendor": "TOTOLINK",
    "product": "A702R",
    "versions": [
      {
        "version": "4.0.0-B20211108.1423",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
totolink	www.totolink.net/
vuldb	www.vuldb.com/
github	www.github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formOneKeyAccessButton/formOneKeyAccessButton.md
github	www.github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formOneKeyAccessButton/formOneKeyAccessButton.md
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
submit-url	request body	/boafrm/formOneKeyAccessButton	Buffer overflow vulnerability in TOTOLINK A702R due to manipulation of submit-url leading to possible remote exploit.	CWE-119, CWE-120

04 Sep 2025 16:42Current

6.9Medium risk

Vulners AI Score6.9

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00429

SSVC