CVE-2025-9303CWE-119CWE-120

TOTOLINK A720R cstecgi.cgi setParentalRules buffer overflow

High · published August 21, 2025

CVSS v4.0
8.7
EPSS
1%
Percentile
59.2
In the wild
Unconfirmed
What it is

A security flaw has been discovered in TOTOLINK A720R 4.1.5cu.630_B20250509. This issue affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument desc results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00899 · 59.2th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2025-08-21T14:32Z
EPSS history
Timeline
  • 21 AUG 14:32Z
    TOTOLINK A720R cstecgi.cgi setParentalRules buffer overflow
    cvelistv5