CVE-2025-8136

Name of the Vulnerable Software and Affected Versions TOTOLINK A702R version 4.0.0-B20230721.1521

Description A critical vulnerability exists in the HTTP POST Request Handler component of TOTOLINK A702R. The vulnerability is due to a buffer overflow triggered by manipulating the ip6addr argument within a POST request to the /boafrm/formFilter endpoint. This allows for remote exploitation. The exploit has been publicly disclosed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.