CVE-2025-8136: TOTOLINK A702R HTTP POST Request formFilter buffer overflow
A vulnerability, which was classified as critical, was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected is an unknown function of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8136?
CVE-2025-8136 is classified as a critical vulnerability.
How do I fix CVE-2025-8136?
To mitigate CVE-2025-8136, users should update their TOTOLINK A702R firmware to the latest version.
What component is affected by CVE-2025-8136?
CVE-2025-8136 affects the HTTP POST Request Handler component of the TOTOLINK A702R.
What kind of attack is possible with CVE-2025-8136?
CVE-2025-8136 allows attackers to exploit a buffer overflow vulnerability.
Which function is exploited in CVE-2025-8136?
The vulnerability in CVE-2025-8136 is related to the manipulation of the ip6addr argument.