CVE-2025-9781CWE-119CWE-120

CVE-2025-9781

High · published September 1, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20211108.1423. This affects the function sub_4162DC of the file /boafrm/formFilter. Such manipulation of the argument ip6addr leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00664 · 51.1th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2025-09-01T18:15Z
Affected products (1)
ProductVersionsFixed in
totolink/a702r_firmwareall versions—
References (6)
https://github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formFilter/formFilter.md · [email protected]https://github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formFilter/formFilter.md#poc · [email protected]https://vuldb.com/?ctiid.322083 · [email protected]https://vuldb.com/?id.322083 · [email protected]https://vuldb.com/?submit.640989 · [email protected]https://www.totolink.net/ · [email protected]
EPSS history
Timeline
  • 01 SEP 13:32Z
    TOTOLINK A702R formFilter sub_4162DC buffer overflow
    cvelistv5