CVE-2025-4731

A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type/ip_subnet leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

• CWE-119
• CWE-120

• https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/4.mdBroken Link
• https://vuldb.com/?ctiid.309033Permissions Required, VDB Entry
• https://vuldb.com/?id.309033Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.570688Third Party Advisory, VDB Entry
• https://www.totolink.net/Product

Published

May 16, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-47299Rejected reason: Not used
• CVE-2025-4730A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0…8.8
• CVE-2025-47300Rejected reason: Not used
• CVE-2025-47301Rejected reason: Not used
• CVE-2025-47302Rejected reason: Not used
• CVE-2025-47303Rejected reason: Not used
• CVE-2025-47314Memory corruption while processing data sent by FE driver.7.8
• CVE-2025-47315Memory corruption while handling repeated memory unmap reque…7.8
• CVE-2025-47316Memory corruption due to double free when multiple threads r…7.8
• CVE-2025-47317Memory corruption due to global buffer overflow when a test …7.8
• CVE-2025-47318Transient DOS while parsing the EPTM test control message to…7.5
• CVE-2025-47319Information disclosure while exposing internal TA-to-TA comm…6.7