CVE-2025-4825 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDMZ buffer overflow

A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file /boafrm/formDMZ of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...

CVE-2025-4825

TOTOLINK A702R/A3002R/A3002RU (v3.0.0-B20230809.1615) are affected. The vulnerability resides in the HTTP POST Request Handler’s /boafrm/formDMZ and is triggered by manipulating the submit-url argument, causing a buffer overflow. The issue is exploitable remotely and the exploit has been disclose...

CVE-2025-4824

The CVE-2025-4824 entry concerns TOTOLINK A702R, A3002R and A3002RU (version 3.0.0-B20230809.1615). A vulnerability in the HTTP POST Request Handler affects the /boafrm/formWsc file, where manipulation of the submit-url argument causes a buffer overflow. Impact described as remote execution feasi...

CVE-2025-4823 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formReflashClientTbl submit-url buffer overflow

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is the function submit-url of the file /boafrm/formReflashClientTbl of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. Th...

PT-2025-21794 · Totolink · Totolink A702R +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R, A3002R, and A3002RU version 3.0.0-B20230809.1615 Description: A critical vulnerability was found in the HTTP POST Request Handler component of the affected devices. The vulnerability affects the function sub 40BE30 of the file...

PT-2025-21805 · Totolink · Totolink A702R +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 3.0.0-B20230809.1615 TOTOLINK A3002R version 3.0.0-B20230809.1615 TOTOLINK A3002RU version 3.0.0-B20230809.1615 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically...

PT-2025-21793 · Totolink · Totolink A702R +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R, A3002R, and A3002RU version 3.0.0-B20230809.1615 Description: A critical vulnerability was found in the HTTP POST Request Handler component, affecting an unknown function of the file /boafrm/formSaveConfig. The manipulation of...

PT-2025-21801 · Totolink · Totolink A702R +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 3.0.0-B20230809.1615 TOTOLINK A3002R version 3.0.0-B20230809.1615 TOTOLINK A3002RU version 3.0.0-B20230809.1615 Description: A critical issue affects the unknown processing of the file /boafrm/formNtp of the component...

PT-2025-21804 · Totolink · Totolink A702R +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R, A3002R, and A3002RU version 3.0.0-B20230809.1615 Description: A critical issue has been found in the HTTP POST Request Handler component. The problem arises from the manipulation of the submit-url argument, leading to a buffer...

TOTOLINK A702r、TOTOLINK A3002R和TOTOLINK A3002RU 安全漏洞

TOTOLINK A3002RU and others are products of China Gion Electronics TOTOLINK.TOTOLINK A3002RU is a wireless router product.TOTOLINK A702r is a router device.TOTOLINK A3002R is a wireless router. A security vulnerability exists in the TOTOLINK A702r, TOTOLINK A3002R, and TOTOLINK A3002RU version...

PT-2025-21796 · Totolink · Totolink A702R +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R, A3002R, and A3002RU version 3.0.0-B20230809.1615 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically affecting an unknown functionality of the file /boafrm/formSysCmd. The...

PT-2025-21790 · Totolink · Totolink A702R +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 3.0.0-B20230809.1615 TOTOLINK A3002R version 3.0.0-B20230809.1615 TOTOLINK A3002RU version 3.0.0-B20230809.1615 Description: A critical vulnerability has been found in the TOTOLINK A702R, A3002R, and A3002RU routers. Th...

PT-2025-21785 · Totolink · Totolink A702R +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R, A3002R, and A3002RU version 3.0.0-B20230809.1615 Description: A critical vulnerability was found in the HTTP POST Request Handler component, affecting unknown code of the file /boafrm/formDMZ. The manipulation of the submit-ur...

PT-2025-21799 · Totolink · Totolink A702R +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R, A3002R, and A3002RU version 3.0.0-B20230809.1615 Description: A critical vulnerability was found in the HTTP POST Request Handler component of the affected TOTOLINK devices. This vulnerability affects an unknown part of the fi...

PT-2025-21783 · Totolink · Totolink A702R +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R, A3002R and A3002RU version 3.0.0-B20230809.1615 Description: A critical issue affects the submit-url function of the file /boafrm/formReflashClientTbl in the HTTP POST Request Handler component, leading to a buffer overflow...

TOTOLINK A702R suffers from information leakage vulnerability

TOTOLINK A702R is a router product. The TOTOLINK A702R suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

TOTOLINK A702r has unspecified vulnerabilities

TOTOLINK A702r is a router device from China-based Gion Electronics TOTOLINK.A security vulnerability exists in TOTOLINK A702r, which stems from the product's login page that does not add effective permission control for directory access. An attacker can access the /add/, /img/, /js/, /mobile...

CVE-2021-34218

Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /add/ , /img/, /js/, and /mobile directories via GET Parameter...

CVE-2021-34218

Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /add/ , /img/, /js/, and /mobile directories via GET Parameter...

Directory traversal

Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /add/ , /img/, /js/, and /mobile directories via GET Parameter...