CVE-2025-6337
published 2025-06-20CVE-2025-6337: A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615/4.0.0-B20230531.1404. It has been declared as critical. Affected by this…
high7.4CVSS 4.0
AVNACLATNPRLUINVCHVIHVAHSCNSINSANEPCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615/4.0.0-B20230531.1404. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formTmultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| msrc | azl3_cert-manager_1.11.2-8_on_azure_linux_3.0 | — | — |
| msrc | azl3_cert-manager_1.12.12-1_on_azure_linux_3.0 | — | — |
| msrc | azure_linux_3.0_arm | — | — |
| msrc | azure_linux_3.0_x64 | — | — |
| msrc | cbl2_cert-manager_1.11.2-22_on_cbl_mariner_2.0 | — | — |
| totolink | a3002r | — | — |
| totolink | a3002r | — | — |
| totolink | a3002r_firmware | — | — |
| totolink | a3002r_firmware | — | — |
| totolink | a3002ru | — | — |
| totolink | a3002ru | — | — |
| totolink | a3002ru_firmware | — | — |
| totolink | a3002ru_firmware | — | — |