CVE-2025-8138: TOTOLINK A702R HTTP POST Request formOneKeyAccessButton buffer overflow
A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formOneKeyAccessButton of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8138?
CVE-2025-8138 is classified as critical due to its potential impact on vulnerable systems.
How do I fix CVE-2025-8138?
To mitigate CVE-2025-8138, it is recommended to update the TOTOLINK A702R firmware to the latest version provided by the vendor.
What components are affected by CVE-2025-8138?
CVE-2025-8138 affects the HTTP POST Request Handler related to the /boafrm/formOneKeyAccessButton functionality.
What type of vulnerability is CVE-2025-8138?
CVE-2025-8138 is a manipulation vulnerability that affects the submit-url argument within the specific service.
Which devices are impacted by CVE-2025-8138?
The vulnerability CVE-2025-8138 impacts devices running TOTOLINK A702R with the version 4.0.0-B20230721.1521.