CVE-2025-4732: TOTOLINK A3002R/A3002RU HTTP POST Request formFilter buffer overflow
A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4732?
CVE-2025-4732 is classified as a critical vulnerability.
What affected products are vulnerable to CVE-2025-4732?
CVE-2025-4732 affects TOTOLINK A3002R and A3002RU devices with firmware version 3.0.0-B20230809.1615.
How does CVE-2025-4732 affect the devices?
CVE-2025-4732 can lead to a buffer overflow due to improper handling of the 'ip6addr' argument in the HTTP POST Request Handler.
How can I fix CVE-2025-4732?
To fix CVE-2025-4732, update to the latest firmware version provided by TOTOLINK.
Is CVE-2025-4732 a remote attack vector?
Yes, CVE-2025-4732 can potentially be exploited remotely through crafted HTTP POST requests.