CVE-2025-4835: TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWlanRedirect buffer overflow
A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4835?
CVE-2025-4835 has been declared as critical.
Which devices are affected by CVE-2025-4835?
CVE-2025-4835 affects TOTOLINK A702R, A3002R, and A3002RU devices running firmware version 3.0.0-B20230809.1615.
How do I fix CVE-2025-4835?
To fix CVE-2025-4835, update the firmware of your TOTOLINK devices to the latest version provided by the vendor.
What type of vulnerability is CVE-2025-4835?
CVE-2025-4835 is a vulnerability in the HTTP POST Request Handler related to an unknown functionality.
What impact does CVE-2025-4835 have on affected devices?
CVE-2025-4835 could potentially allow unauthorized access or manipulation of the affected TOTOLINK devices.