CVE-2025-4827

CVE-2025-4827 affects TOTOLINK A702R, A3002R and A3002RU (version 3.0.0-B20230809.1615). The vulnerability is in the HTTP POST Request Handler, specifically the /boafrm/formSaveConfig function where manipulating the submit-url parameter leads to a buffer overflow. It is exploitable remotely and e...