CVE-2025-9782 is a buffer overflow vulnerability affecting TOTOLINK A702R firmware version 4.0.0-B20211108.1423. The flaw resides in the function sub_4466F8 within the /boafrm/formOneKeyAccessButton component. By manipulating the submit-url argument, an attacker can cause a buffer overflow remotely. The vulnerability is classified under CWE-119 and has a CVSS v3.1 score of 8.8, indicating high impact on confidentiality, integrity, and availability. Public exploit code exists, but there is no evidence of exploitation in the wild. No vendor advisory or patch information is provided.

Successful exploitation of this vulnerability could allow a remote attacker with low privileges to execute arbitrary code or cause a denial of service on the affected device, impacting confidentiality, integrity, and availability. The high CVSS score reflects the critical nature of the buffer overflow and its potential consequences.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable interface and monitor for suspicious activity related to the submit-url parameter. Avoid exposing the device to untrusted networks where possible.