A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr leads to buffer overflow.

This vulnerability was named CVE-2025-4732. The attack can be initiated remotely. Furthermore, there is an exploit available.