CVE-2025-9780

TOTOLINK A702R (firmware 4.0.0-B20211108.1423) is affected. The vulnerability resides in /boafrm/formIpQoS, in function sub_419BE0, where improper handling of the mac argument causes a buffer overflow. The issue can be triggered remotely and has been demonstrated in the provided sources. Several ...

CVE-2025-9779

CVE-2025-9779 affects TOTOLINK A702R (version 4.0.0-B20211108.1423). The vulnerability is in the function sub_4162DC of /boafrm/formFilter, where manipulation of the ip6addr argument causes a buffer overflow. The issue can be exploited remotely, and public exploits exist. Several sources corrobor...

CVE-2025-9779 TOTOLINK A702R formFilter sub_4162DC buffer overflow

A vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this vulnerability is the function sub4162DC of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in buffer overflow. It is possible to launch the attack remotely. The exploit is now publi...

CVE-2025-9779 TOTOLINK A702R formFilter sub_4162DC buffer overflow

A vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this vulnerability is the function sub4162DC of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in buffer overflow. It is possible to launch the attack remotely. The exploit is now publi...

TOTOLINK A702r 安全漏洞

TOTOLINK A702R is a wireless router device manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection and signal coverage. The TOTOLINK A702R suffers from a buffer overflow vulnerability, which originates from an incorrect operation of the parameter ip6addr in the...

PT-2025-35488

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 4.0.0-B20211108.1423 Description: A buffer overflow issue exists in the sub 4466F8 function of the /boafrm/formOneKeyAccessButton file. The vulnerability is triggered by manipulating the submit-url argument, allowing fo...

TOTOLINK A702r 安全漏洞

TOTOLINK A702R is a wireless router device manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection and signal coverage. The TOTOLINK A702R suffers from a buffer overflow vulnerability that originates from the failure of the parameter ip6addr of the function...

PT-2025-35484

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 4.0.0-B20211108.1423 Description: A buffer overflow issue exists in the sub 419BE0 function of the /boafrm/formIpQoS file. Manipulation of the mac argument causes the overflow, and the attack can be initiated remotely...

PT-2025-35493

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 4.0.0-B20211108.1423 Description: A buffer overflow issue exists in the sub 418030 function of the /boafrm/formParentControl file. Manipulation of the submit-url argument can trigger this issue, potentially allowing for...

TOTOLINK A702r 安全漏洞

TOTOLINK A702R is a wireless router device manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection and signal coverage. The TOTOLINK A702R suffers from a buffer overflow vulnerability, which originates from the parameter mac in the file /boafrm/formIpQoS failing...

TOTOLINK A702r 安全漏洞

TOTOLINK A702R is a wireless router device manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection and signal coverage. The TOTOLINK A702R suffers from a buffer overflow vulnerability that originates from the parameter submit-url in file...

PT-2025-35485

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 4.0.0-B20211108.1423 Description: A buffer overflow vulnerability exists in the function sub 4162DC located in the file /boafrm/formFilter. Manipulation of the ip6addr argument can trigger the vulnerability, allowing fo...

CVE-2025-9577

A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this...

TOTOLINK X2000R Use of Default Credentials Vulnerability

TOTOLINK X2000R is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R suffers from a Use Default Credentials vulnerability, which originates from an unknown functi...

CVE-2025-9533

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5241B20210927. Affected is an unknown function of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed t...

CVE-2025-9577

A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this...

CVE-2025-9577

TOTOLINK X2000R (firmware up to 2.0.0) contains a vulnerability in the Administrative Interface where an unknown function in /etc/shadow.sample can lead to default credential usage. Local access is required; exploitation is described as difficult, but the exploit has been released publicly and ma...

CVE-2025-9577 TOTOLINK X2000R Administrative shadow.sample default credentials

A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this...

CVE-2025-9577 TOTOLINK X2000R Administrative shadow.sample default credentials

A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this...

CVE-2025-9533

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5241B20210927. Affected is an unknown function of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed t...