CVE-2025-9303

TOTOLINK A720R cstecgi.cgi setParentalRules buffer overflow

CVSS 8.7 HIGHEPSS 0.8%CWE-119 CWE-120

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.7EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

21 ago 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A security flaw has been discovered in TOTOLINK A720R 4.1.5cu.630_B20250509. This issue affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument desc results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Produtos afetados

TOTOLINK · A720R

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/lin-3-start/lin-cve/blob/main/TOTOLINK%20A720R/TOTOLINK-A720R.md https://github.com/lin-3-start/lin-cve/blob/main/TOTOLINK%20A720R/TOTOLINK-A720R.md#poc https://vuldb.com/?ctiid.320908 https://vuldb.com/?id.320908 https://vuldb.com/?submit.632410 https://www.totolink.net/