TOTOLINK A3002R security vulnerabilities

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. A buffer overflow vulnerability exists in the TOTOLINK A3002R. The vulnerability stems from the fwip...

TOTOLINK A3002R security vulnerabilities

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. The TOTOLINK A3002R suffers from an OS command injection vulnerability that stems from the presence of...

TOTOLINK A3002R security vulnerabilities

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. The TOTOLINK A3002R suffers from a command injection vulnerability that stems from the bupload.html...

TOTOLINK A3002R security vulnerabilities

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. The TOTOLINK A3002R suffers from an OS command injection vulnerability, which stems from a command...

TOTOLINK A3002R security vulnerabilities

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. TOTOLINK A3002R suffers from a command injection vulnerability that stems from the presence of command...

TOTOLINK A3002R security vulnerabilities

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. The TOTOLINK A3002R suffers from a security vulnerability that stems from the use of insecure...

PT-2025-33684 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: The device contains insecure credentials for the telnet service and root account. Recommendations: Change the default credentials for the telnet service and root account...

CVE-2025-55587

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the hostname parameter at /boafrm/formMapDelDevice. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-55584

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain insecure credentials for the telnet service and root account...

CVE-2025-55589

The TOTOLINK A3002R wireless router, specifically version v4.0.0-B20230531.1404 , is susceptible to multiple OS command injection vulnerabilities. These flaws exist in the microprogramming software at the /boafrm/formMapDelDevice endpoint, triggered through the macstr , bandstr , and clientoff pa...

CVE-2025-55585

The TOTOLINK A3002R router (version 4.0.0-B20230531.1404 ) contains an eval injection vulnerability caused by the improper neutralization of directives in dynamically evaluated code. The root cause is the use of the eval() function without sufficient input sanitization. Exploiting this flaw allow...

CVE-2025-55586

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the url parameter at /boafrm/formFilter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-55585

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an eval injection vulnerability via the eval function...

CVE-2025-55591

TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint...

CVE-2025-55590

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an command injection vulnerability via the component bupload.html...

CVE-2025-55586

The TOTOLINK A3002R router (version 4.0.0-B20230531.1404 ) contains a buffer overflow vulnerability in the url parameter of the /boafrm/formFilter API endpoint. The root cause is uncontrolled resource consumption , where the software fails to properly limit memory buffer operations. A remote atta...

CVE-2025-55588

The TOTOLINK A3002R router, specifically version 4.0.0-B20230531.1404 , is vulnerable to a buffer overflow in the fw_ip parameter of the /boafrm/formPortFw API endpoint. The root cause is that the input is copied directly to a fixed-length stack buffer without performing length or character check...

CVE-2025-55591

The TOTOLINK A3002R wireless router, specifically version v4.0.0-B20230531.1404 , is vulnerable to an OS command injection flaw. The vulnerability exists in the devicemac parameter within the formMapDel endpoint due to a lack of proper data cleaning measures at the control level. A remote attacke...

CVE-2025-55589

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at /boafrm/formMapDelDevice...

CVE-2025-55587

The TOTOLINK A3002R wireless router, running firmware version v4.0.0-B20230531.1404 , is vulnerable to a buffer overflow in the hostname parameter of the /boafrm/formMapDelDevice endpoint. This issue, categorized as uncontrolled resource consumption, allows a remote attacker to submit a crafted r...