CVE-2025-4733

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This issue affects some unknown processing of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119CWE-120

Affected software

No affected versions have been published.

Timeline

Published
May 16, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-473305.5Transient DOS while parsing video packets received from the video firmware.CVE-2025-473316.1Information disclosure while processing a firmware event.CVE-2025-473326.4Memory corruption while processing a config call from userspace.CVE-2025-473336.6Memory corruption while handling buffer mapping operations in the cryptographic driver.CVE-2025-473346.7Memory corruption while processing shared command buffer packet between camera userspace and kernel.CVE-2025-473356.7Memory corruption while parsing clock configuration data for a specific hardware type.CVE-2025-473366.7Memory corruption while performing sensor register read operations.CVE-2025-473376.7Memory corruption while accessing a synchronization object during concurrent operations.CVE-2025-473387.8Memory corruption while processing escape commands from userspace.CVE-2025-473397.8Memory corruption while deinitializing a HDCP session.CVE-2025-47349.8A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function ofCVE-2025-473407.8Memory corruption while processing IOCTL call to get the mapping.
CVE-2025-4733: High severity, CVSS 8.8 | Vulnix