CVE-2025-9781

Опубликовано: 01 сент. 2025

Источник: nvd

CVSS3: 8.8

CVSS2: 9

EPSS Низкий

Описание

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20211108.1423. This affects the function sub_4162DC of the file /boafrm/formFilter. Such manipulation of the argument ip6addr leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Ссылки

https://github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formFilter/formFilter.md
Broken Link
https://github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formFilter/formFilter.md#poc
Broken Link
https://vuldb.com/?ctiid.322083
Permissions Required
https://vuldb.com/?id.322083
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.640989
Third Party Advisory
VDB Entry
https://www.totolink.net/
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:totolink:a702r_firmware:4.0.0-b20211108.1423:*:*:*:*:*:*:*

cpe:2.3:h:totolink:a702r:-:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00143

Низкий

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-119