Sign-up

ID

VAR-202505-1723


CVE

CVE-2025-4730


TITLE

TOTOLINK A3002R/A3002RU Buffer Overflow Vulnerability

Trust: 0.6

sources: CNVD: CNVD-2025-11209

DESCRIPTION

A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. TOTOLINK A3002R and A3002RU are wireless router products under the TOTOLINK brand, supporting multiple network functions and services. No detailed vulnerability details are currently provided

Trust: 1.44

sources: NVD: CVE-2025-4730 // CNVD: CNVD-2025-11209

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2025-11209

AFFECTED PRODUCTS

vendor:totolinkmodel:a3002r 3.0.0-b20230809.1615scope: - version: -

Trust: 0.6

vendor:totolinkmodel:a3002ru 3.0.0-b20230809.1615scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2025-11209

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com: CVE-2025-4730
value: HIGH

Trust: 1.0

CNVD: CNVD-2025-11209
value: HIGH

Trust: 0.6

cna@vuldb.com: CVE-2025-4730
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

CNVD: CNVD-2025-11209
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

cna@vuldb.com: CVE-2025-4730
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 1.0

sources: CNVD: CNVD-2025-11209 // NVD: CVE-2025-4730

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.0

problemtype:CWE-120

Trust: 1.0

sources: NVD: CVE-2025-4730

EXTERNAL IDS

db:NVDid:CVE-2025-4730

Trust: 1.6

db:VULDBid:309032

Trust: 1.6

db:CNVDid:CNVD-2025-11209

Trust: 0.6

sources: CNVD: CNVD-2025-11209 // NVD: CVE-2025-4730

REFERENCES

url:https://github.com/ch13hh/tmp_store_cc/blob/main/tt/ta/3.md

Trust: 1.6

url:https://vuldb.com/?ctiid.309032

Trust: 1.6

url:https://vuldb.com/?id.309032

Trust: 1.6

url:https://vuldb.com/?submit.570687

Trust: 1.6

url:https://www.totolink.net/

Trust: 1.6

sources: CNVD: CNVD-2025-11209 // NVD: CVE-2025-4730

SOURCES

db:CNVDid:CNVD-2025-11209
db:NVDid:CVE-2025-4730

LAST UPDATE DATE

2025-06-01T23:11:04.558000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2025-11209date:2025-05-30T00:00:00
db:NVDid:CVE-2025-4730date:2025-05-16T14:42:18.700

SOURCES RELEASE DATE

db:CNVDid:CNVD-2025-11209date:2025-05-30T00:00:00
db:NVDid:CVE-2025-4730date:2025-05-16T00:15:19.970