CVE-2025-4730: TOTOLINK A3002R/A3002RU HTTP POST Request formMapDel buffer overflow
A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4730?
CVE-2025-4730 has been rated as critical due to its potential impact.
What software is affected by CVE-2025-4730?
CVE-2025-4730 affects TOTOLINK A3002R and A3002RU routers running firmware version 3.0.0-B20230809.1615.
How do I fix CVE-2025-4730?
To fix CVE-2025-4730, it is recommended to update the firmware of your TOTOLINK A3002R or A3002RU to the latest version provided by the vendor.
What type of vulnerability is CVE-2025-4730?
CVE-2025-4730 is a buffer overflow vulnerability stemming from improper handling of HTTP POST requests.
Who reported CVE-2025-4730?
The specific reporter of CVE-2025-4730 is not publicly disclosed, but it has been identified and documented within security advisories.