CVE-2025-4730

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119CWE-120

Affected software

No affected versions have been published.

Timeline

Published
May 16, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-47318.8A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of tCVE-2025-473147.8Memory corruption while processing data sent by FE driver.CVE-2025-473157.8Memory corruption while handling repeated memory unmap requests from guest VM.CVE-2025-473167.8Memory corruption due to double free when multiple threads race to set the timestamp store.CVE-2025-473177.8Memory corruption due to global buffer overflow when a test command uses an invalid payload type.CVE-2025-473187.5Transient DOS while parsing the EPTM test control message to get the test pattern.CVE-2025-473196.7Information disclosure while exposing internal TA-to-TA communication APIs to HLOSCVE-2025-47328.8A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown codCVE-2025-473207.8Memory corruption while processing MFC channel configuration during music playback.CVE-2025-473217.8Memory corruption while copying packets received from unix clients.CVE-2025-473227.8Memory corruption while handling IOCTL calls to set mode.CVE-2025-473237.8Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-4730: High severity, CVSS 8.8 | Vulnix