Sign-up

ID

VAR-202505-1820


CVE

CVE-2025-4831


TITLE

plural  TOTOLINK  Buffer error vulnerability in the product

Trust: 0.8

sources: JVNDB: JVNDB-2025-005629

DESCRIPTION

A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formSiteSurveyProfile of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. TOTOLINK of A702R firmware, A3002R firmware, A3002RU The firmware contains a buffer error vulnerability and a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.62

sources: NVD: CVE-2025-4831 // JVNDB: JVNDB-2025-005629

AFFECTED PRODUCTS

vendor:totolinkmodel:a3002ruscope:eqversion:3.0.0-b20230809.1615

Trust: 1.0

vendor:totolinkmodel:a3002rscope:eqversion:3.0.0-b20230809.1615

Trust: 1.0

vendor:totolinkmodel:a702rscope:eqversion:3.0.0-b20230809.1615

Trust: 1.0

vendor:totolinkmodel:a3002rscope: - version: -

Trust: 0.8

vendor:totolinkmodel:a3002ruscope: - version: -

Trust: 0.8

vendor:totolinkmodel:a702rscope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2025-005629 // NVD: CVE-2025-4831

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com: CVE-2025-4831
value: HIGH

Trust: 1.0

OTHER: JVNDB-2025-005629
value: HIGH

Trust: 0.8

cna@vuldb.com: CVE-2025-4831
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

OTHER: JVNDB-2025-005629
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

cna@vuldb.com: CVE-2025-4831
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 1.0

OTHER: JVNDB-2025-005629
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2025-005629 // NVD: CVE-2025-4831

PROBLEMTYPE DATA

problemtype:CWE-120

Trust: 1.0

problemtype:CWE-119

Trust: 1.0

problemtype:Buffer error (CWE-119) [ others ]

Trust: 0.8

problemtype: Classic buffer overflow (CWE-120) [ others ]

Trust: 0.8

problemtype: Classic buffer overflow (CWE-120) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2025-005629 // NVD: CVE-2025-4831

EXTERNAL IDS

db:NVDid:CVE-2025-4831

Trust: 2.6

db:VULDBid:309297

Trust: 1.8

db:JVNDBid:JVNDB-2025-005629

Trust: 0.8

sources: JVNDB: JVNDB-2025-005629 // NVD: CVE-2025-4831

REFERENCES

url:https://vuldb.com/?id.309297

Trust: 1.8

url:https://vuldb.com/?submit.574604

Trust: 1.8

url:https://www.totolink.net/

Trust: 1.8

url:https://vuldb.com/?ctiid.309297

Trust: 1.0

url:https://github.com/ch13hh/tmp_store_cc/blob/main/toto/9.md

Trust: 1.0

url:https://nvd.nist.gov/vuln/detail/cve-2025-4831

Trust: 0.8

sources: JVNDB: JVNDB-2025-005629 // NVD: CVE-2025-4831

SOURCES

db:JVNDBid:JVNDB-2025-005629
db:NVDid:CVE-2025-4831

LAST UPDATE DATE

2025-05-29T23:29:02.580000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2025-005629date:2025-05-26T02:01:00
db:NVDid:CVE-2025-4831date:2025-05-23T15:51:12.887

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2025-005629date:2025-05-26T00:00:00
db:NVDid:CVE-2025-4831date:2025-05-17T17:15:48.383