CVE-2025-9303

CRÍTICO 9.8CVE-2025-9303 · Published 21/08/2025 · updated 17/06/2026

Em resumo

CVE-2025-9303 é uma vulnerabilidade CRÍTICO (CVSS 9.8).
Chance de exploração nos próximos 30 dias (EPSS): 0.90%, maior que 59.6% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A security flaw has been discovered in TOTOLINK A720R 4.1.5cu.630_B20250509. This issue affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument desc results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.

References

lin-3-start/lin-cve · Exploit
lin-3-start/lin-cve · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory
totolink.net · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free