What is the severity of CVE-2025-4833?

CVE-2025-4833 is classified as a critical vulnerability.

Which devices are affected by CVE-2025-4833?

CVE-2025-4833 affects the TOTOLINK A702R, A3002R, and A3002RU devices.

How do I fix CVE-2025-4833?

To fix CVE-2025-4833, it is recommended to update the affected device firmware to the latest version provided by TOTOLINK.

What components are impacted by CVE-2025-4833?

CVE-2025-4833 impacts the HTTP POST Request Handler component of the affected devices.

What is the exploit mechanism for CVE-2025-4833?

The vulnerability in CVE-2025-4833 can be exploited through manipulation of the 'submit-url' argument in the '/boafrm/formNtp' file.

Vulnerability/
CVE-2025-4833

critical

CWE

120 119

17/5/2025

CVE-2025-4833: TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formNtp buffer overflow

First published: Sat May 17 2025(Updated: )

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This issue affects some unknown processing of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Credit: cna@vuldb.com

Affected Software	Affected Version	How to fix
Totolink A702r Firmware
Totolink A3002r Firmware
TOTOLINK A3002R

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2025-4833?
CVE-2025-4833 is classified as a critical vulnerability.
Which devices are affected by CVE-2025-4833?
CVE-2025-4833 affects the TOTOLINK A702R, A3002R, and A3002RU devices.
How do I fix CVE-2025-4833?
To fix CVE-2025-4833, it is recommended to update the affected device firmware to the latest version provided by TOTOLINK.
What components are impacted by CVE-2025-4833?
CVE-2025-4833 impacts the HTTP POST Request Handler component of the affected devices.
What is the exploit mechanism for CVE-2025-4833?
The vulnerability in CVE-2025-4833 can be exploited through manipulation of the 'submit-url' argument in the '/boafrm/formNtp' file.

collector/mitre-cve
source/MITRE
agent/title
agent/description
agent/references
agent/first-publish-date
agent/weakness
agent/type
agent/guess-ai
agent/software-canonical-lookup
agent/softwarecombine
collector/nvd-api
source/NVD
agent/source
agent/last-modified-date
agent/author
agent/severity
agent/tags
agent/event
vendor/totolink
canonical/totolink a702r firmware
canonical/totolink a3002r firmware
canonical/totolink a3002r

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.