CVE-2025-6627: TOTOLINK A702R HTTP POST Request formIpv6Setup buffer overflow
A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formIpv6Setup of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6627?
CVE-2025-6627 is classified as critical due to its potential to cause a buffer overflow.
How do I fix CVE-2025-6627?
To fix CVE-2025-6627, update the TOTOLINK A702R firmware to the latest version provided by the vendor.
What component is affected by CVE-2025-6627?
CVE-2025-6627 affects the HTTP POST Request Handler within the /boafrm/formIpv6Setup file.
What is the attack vector for CVE-2025-6627?
The attack vector for CVE-2025-6627 is based on manipulating the submit-url argument.
Which devices are affected by CVE-2025-6627?
CVE-2025-6627 specifically affects the TOTOLINK A702R model with firmware version 4.0.0-B20230721.1521.