← Vulnerability feed

Vulnerability record · CVE-2025-4833 · published 17 May 2025

CVE-2025-4833: Totolink a702r firmware memory buffer overflow vulnerability

TTotolink · A702r Firmware

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This issue affects some unknown processing of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

8.7 CVSS 4.0 High EPSS 0.81% · top 44.7% CWE-119 · Memory buffer overflowCWE-120 · Classic buffer overflow
8.7CVSS 4.0 base score, v2 9.0
0.81%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
5References
17 Jun 2026Last modified by NVD

Description

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This issue affects some unknown processing of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/CH13hh/tmp_store_cc/blob/main/toto/11.md Broken Link
https://vuldb.com/?ctiid.309299 Permissions RequiredVDB Entry
https://vuldb.com/?id.309299 Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.574606 Third Party AdvisoryVDB Entry
https://www.totolink.net/ Product

Track CVE-2025-4833 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-55591Totolink a3002r firmware command injection vulnerabilityTOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoi…EPSS 7.6%9.8CVE-2025-45863Totolink a3002r firmware classic buffer overflow vulnerabilityTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface.EPSS 0.61%9.8CVE-2025-45861Totolink a3002r firmware classic buffer overflow vulnerabilityTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface.EPSS 0.61%9.8CVE-2025-45865Totolink a3002r firmware classic buffer overflow vulnerabilityTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface.EPSS 0.61%9.8CVE-2025-45858Totolink a3002r firmware os command injection vulnerabilityTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.EPSS 11%9.8CVE-2025-25579Totolink a3002r firmware os command injection vulnerabilityTOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.EPSS 10%9.8CVE-2024-34195Totolink a3002r firmware out-of-bounds write vulnerabilityTOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function …EPSS 0.94%9.8CVE-2024-34198Totolink a3002ru firmware classic buffer overflow vulnerabilityTOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow. The formWlEncrypt CGI handler in the boa program fail…EPSS 0.66%

Source: NIST National Vulnerability Database (record CVE-2025-4833), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.