CVE-2025-9779

Опубликовано: 01 сент. 2025

Источник: nvd

CVSS3: 8.8

CVSS2: 9

EPSS Низкий

Описание

A vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this vulnerability is the function sub_4162DC of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.

Ссылки

https://github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formFilter/formFilter.md
Broken Link
https://github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formFilter/formFilter.md#poc
Broken Link
https://vuldb.com/?ctiid.322081
Permissions Required
https://vuldb.com/?id.322081
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.640987
Third Party Advisory
VDB Entry
https://www.totolink.net/
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:totolink:a702r_firmware:4.0.0-b20211108.1423:*:*:*:*:*:*:*

cpe:2.3:h:totolink:a702r:-:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00143

Низкий

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

BDU:2025-10901