CVE-2025-6953: TOTOLINK A3002RU HTTP POST Request formParentControl buffer overflow
A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6953?
CVE-2025-6953 is classified as a critical vulnerability due to its potential to cause significant security issues.
How do I fix CVE-2025-6953?
To fix CVE-2025-6953, it is recommended to update the firmware of the TOTOLINK A3002RU device to the latest version.
What type of vulnerability is CVE-2025-6953?
CVE-2025-6953 is a buffer overflow vulnerability found in the HTTP POST Request Handler of the TOTOLINK A3002RU.
What components are affected by CVE-2025-6953?
CVE-2025-6953 affects the formParentControl component in the TOTOLINK A3002RU device.
Can CVE-2025-6953 be exploited remotely?
Yes, CVE-2025-6953 can potentially be exploited remotely, allowing attackers to manipulate input and execute arbitrary code.