CVE-2025-9303: TOTOLINK A720R cstecgi.cgi setParentalRules buffer overflow
A security flaw has been discovered in TOTOLINK A720R 4.1.5cu.630B20250509. This issue affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument desc results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9303?
CVE-2025-9303 is classified as a high-severity vulnerability due to its potential for remote exploitation and buffer overflow risks.
How do I fix CVE-2025-9303?
To mitigate CVE-2025-9303, update the TOTOLINK A720R firmware to the latest version that addresses this vulnerability.
What specific function is affected by CVE-2025-9303?
CVE-2025-9303 affects the setParentalRules function in the /cgi-bin/cstecgi.cgi file.
Can CVE-2025-9303 be exploited remotely?
Yes, CVE-2025-9303 can be exploited remotely, making it a significant security risk for affected devices.
What type of attack does CVE-2025-9303 involve?
CVE-2025-9303 involves a buffer overflow attack due to manipulation of the argument 'desc'.