EUVD-2025-18475CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4Description
A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Analysis
Critical buffer overflow vulnerability in TOTOLINK A3002RU routers (version 3.0.0-B20230809.1615 and potentially others) affecting the HTTP POST request handler at endpoint /boafrm/formMultiAP. An authenticated attacker can exploit this via a malicious 'submit-url' parameter to achieve remote code execution with full system compromise (confidentiality, integrity, and availability impact). Public exploit code exists and the vulnerability is actively exploitable.
Technical Context
The vulnerability exists in the HTTP POST request handler component of TOTOLINK's firmware, specifically in the /boafrm/formMultiAP endpoint. The root cause is CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), a classic buffer overflow condition where user-supplied input in the 'submit-url' parameter is not properly validated for length before being written to a fixed-size buffer. This allows an attacker to overwrite adjacent memory, potentially corrupting the stack or heap and achieving arbitrary code execution. The vulnerability affects TOTOLINK A3002RU (CPE: cpe:2.7:o:totolink:a3002ru_firmware:3.0.0-b20230809.1615:*:*:*:*:*:*:*), a consumer-grade wireless router/access point device commonly deployed in small offices and homes.
Affected Products
A3002RU (['3.0.0-B20230809.1615', 'likely other versions in the 3.x series'])
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today