CVE-2025-9779

A vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this vulnerability is the function sub_4162DC of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.

• CWE-119
• CWE-120

• https://github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formFilter/formFilter.mdBroken Link
• https://github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formFilter/formFilter.md#pocBroken Link
• https://vuldb.com/?ctiid.322081Permissions Required
• https://vuldb.com/?id.322081Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.640987Third Party Advisory, VDB Entry
• https://www.totolink.net/Product

Published

Sep 1, 2025

Last Modified

Sep 26, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9772A vulnerability was detected in RemoteClinic up to 2.0. This…9.8
• CVE-2025-9773A flaw has been found in RemoteClinic up to 2.0. This vulner…6.1
• CVE-2025-9774A vulnerability has been found in RemoteClinic up to 2.0. Th…4.3
• CVE-2025-9775A vulnerability was found in RemoteClinic up to 2.0. Impacte…9.8
• CVE-2025-9776The CatFolders – Tame Your WordPress Media Library by Catego…6.5
• CVE-2025-9778A security vulnerability has been detected in Tenda W12 up t…7
• CVE-2025-9780A flaw has been found in TOTOLINK A702R 4.0.0-B20211108.1423…8.8
• CVE-2025-9781A vulnerability has been found in TOTOLINK A702R 4.0.0-B2021…8.8
• CVE-2025-9782A vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.…8.8
• CVE-2025-9783A vulnerability was determined in TOTOLINK A702R 4.0.0-B2021…8.8
• CVE-2025-9784A flaw was found in Undertow where malformed client requests…7.5
• CVE-2025-9785PaperCut Print Deploy is an optional component that integrat…7.7