CNNVD-202507-3173 Information
CNNVD ID
CNNVD-202507-3173
Related CVE
- CNNVD Published: 2025-07-25
Description (Chinese)
TOTOLINK A702r是中国吉翁电子（TOTOLINK）公司的一款路由器设备。 TOTOLINK A702r 4.0.0-B20230721.1521版本存在安全漏洞，该漏洞源于HTTP POST请求处理组件中文件/boafrm/formPortFw对参数service_type的错误操作导致缓冲区溢出。
Description (English)
TOTOLINK A702r is a router equipment of the Chinese company TOTOLINK. The security gap in version 4.0.0-B202300721.1521 of TOTOLINK A702r 4.0.0-B202307151 arises from the error in the processing of the document/boafrm/formPortFw against parameter service type in the HTTTP POST request for processing.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
吉翁电子
Published
2025-07-25
Last Modified
2026-02-24
References
https://github.com/panda666-888/vuls/blob/main/totolink/a702r/formPortFw.md https://vuldb.com/?ctiid.317535 https://vuldb.com/?id.317535 https://vuldb.com/?submit.620485 https://www.totolink.net/ https://access.redhat.com/security/cve/cve-2025-8139
Share on: