CVE-2025-4731: TOTOLINK A3002R/A3002RU HTTP POST Request formPortFw buffer overflow
A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument servicetype/ipsubnet leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4731?
CVE-2025-4731 is classified as a critical vulnerability.
How do I fix CVE-2025-4731?
To fix CVE-2025-4731, users should update the firmware of their TOTOLINK A3002R or A3002RU routers to the latest version.
What components are affected by CVE-2025-4731?
CVE-2025-4731 affects the HTTP POST Request Handler in the file /boafrm/formPortFw.
What type of attack can exploit CVE-2025-4731?
CVE-2025-4731 can be exploited through a buffer overflow attack caused by manipulation of the service_type argument.
Which devices are impacted by CVE-2025-4731?
The devices impacted by CVE-2025-4731 are the TOTOLINK A3002R and A3002RU routers.