TOTOLINK N300RH Denial of Service Vulnerability

TOTOLINK N300RH is a long-range wireless router from China's TOTOLINK, supporting the IEEE 802.11n standard with a maximum wireless transmission rate of 300Mbps. A denial of service vulnerability exists in the TOTOLINK N300RH, which originates from the incorrect operation of the parameter url in...

CVE-2025-7154: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095B20200916/9.3.5u.6139B20201216. Affected by this issue is the function sub41A0F8 of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Hostname leads to os command injection. The attack ma...

TOTOLINK N200RE security vulnerabilities

TOTOLINK N200RE is a SOHO wireless router with 11N wireless technology, the highest wireless transmission rate of up to 300Mbps, support for MIMO architecture and ATCT free channel auto-detection technology, effectively improve wireless performance and stability. TOTOLINK N200RE has a command...

TOTOLINK N302R Plus Router Web Server Code Execution

The vulnerability of the built-in web server boa /boafrm/formPortFw of TOTOLINK N302R Plus router microprogramming software is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failu...

TOTOLINK A3002RU /boafrm/formWlSiteSurvey File Buffer Overflow Vulnerability

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. The TOTOLINK A3002RU version 3.0.0-B20230809.1615 suffers from a buffer overflow vulnerability, which originates from the parameter submit-url in the file /boafrm/formWlSiteSurvey failing to correctly validate t...

TOTOLINK A702r Buffer Overflow Vulnerability

The TOTOLINK A702r is a router device from China's Gion Electronics TOTOLINK. The TOTOLINK A702r version 4.0.0-B20230721.1521 suffers from a buffer overflow vulnerability, which originates from the parameter submit-url in the file /boafrm/formParentControl that fails to validate the length and si...

TOTOLINK T6 Authentication Error Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. An authentication error vulnerability exists in TOTOLINK T6 version 4.1.5cu.748B20211015, which stems from a lack of authentication in the parameter authCode/goURL in the file /formLoginAuth.htm. An attacker could...

CVE-2025-6953

A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is...

CVE-2025-6940

A vulnerability classified as critical was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflo...

CVE-2025-6939

A vulnerability classified as critical has been found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formWlSiteSurvey of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to...

CVE-2025-6916

A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748B20211015. This affects the function FormLogin of the file /formLoginAuth.htm. The manipulation of the argument authCode/goURL leads to missing authentication. The attack needs to be initiated within the local...

TOTOLINK A702R Router Built-in Boa Server DoS

The vulnerability of the built-in boa server /boafrm/formIpv6Setup of the TOTOLINK A702R router’s microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious...

TOTOLINK A3002RU Router DoS

The vulnerability of the built-in boa server /boafrm/formParentControl of the TOTOLINK A3002RU router’s microprogramming software is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious acto...

TOTOLINK A702R Router DoS

The vulnerability of the request processing function in TOTOLINK A702R router microprogramming systems lies in the issue of the operation exceeding the buffer boundaries in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor to cause service...

TOTOLINK N300RH Router Web Server DoS

The vulnerability of the built-in web server boa /boafrm/formFilter of the TOTOLINK N300RH router software is related to improper cleaning or release of resources during the processing of the url parameter. Exploiting this vulnerability allows a malicious actor to cause service failures by sendin...

TOTOLINK A3002R Router FormWlSiteSurvey Arbitrary Command Execution

The vulnerability of the formWlSiteSurvey function in the /boafrm/formWlSiteSurvey file of the TOTOLINK A3002R router’s microprogramming system is related to the lack of measures for cleaning input data during the processing of the wlanif parameter. Exploiting this vulnerability allows a remote...

Totolink T6 Router Form_Login() Unauthorized Access

The vulnerability of the FormLogin function in the microprogramming software of the TOTOLink T6 system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

TOTOLINK X15 Router Web Server DoS

The vulnerability of the built-in web server boa /boafrm/formIpv6Setup of the TOTOLINK X15 router’s microprogramming software is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor to...

TOTOLINK A702R Router Command Execution

The vulnerability of the formWlSiteSurvey function in TOTOLINK A702R router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

TOTOLINK A800R downloadFile.cgi RCE

The vulnerability in the downloadFile.cgi subroutine of the TOTOLINK A800R router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibilit...