Listen to this Post
How the CVE Works
The vulnerability in TOTOLINK A3002R (v1.1.1-B20200824.0128) resides in the `formRoute` function within /boafrm/formRoute. A stack-based buffer overflow occurs due to improper validation of the `subnet` parameter. Attackers can remotely exploit this by sending a crafted payload, overwriting the stack and potentially executing arbitrary code. The public disclosure increases the risk of active exploitation.
DailyCVE Form
Platform: TOTOLINK A3002R
Version: 1.1.1-B20200824.0128
Vulnerability: Stack overflow
Severity: Critical
Date: 06/25/2025
Prediction: Patch by 07/15/2025
What Undercode Say
curl -X POST -d "subnet=<malicious_payload>" http://<target>/boafrm/formRoute
exploit = "A" 1024 Overflow trigger
requests.post("http://<target>/boafrm/formRoute", data={"subnet": exploit})
How Exploit
- Craft oversized `subnet` payload.
- Send via HTTP POST to
/boafrm/formRoute. - Overwrite return address for RCE.
Protection from this CVE
- Apply vendor patch.
- Disable WAN access.
- Use input validation.
Impact
- Remote code execution.
- Device compromise.
- Network infiltration.
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
