CVE-2025-45859: Buffer Copy without Checking Size of Input

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interface...

TOTOLINK A3002R security vulnerabilities

TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from the failure of the staticdns1 parameter in the formIpv6Setup interface to correctly validate the length size of the input data, and no...

PT-2025-20905 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: The issue is related to a buffer overflow in the formMapDelDevice interface of the TOTOLINK A3002R router's firmware. This occurs due to the lack of size checking for input data, which...

PT-2025-20923 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: A command injection issue was discovered via the FUN 00459fdc function. This allows for potential exploitation. Recommendations: For TOTOLINK A3002R version 4.0.0-B20230531.1404,...

TOTOLINK A3002R security vulnerabilities

TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK A3002R, which stems from the bandstr parameter in the formMapDelDevice interface failing to correctly validate the length size of the input data, no detailed...

CVE-2025-45865

CVE-2025-45865 affects TOTOLINK A3002R firmware version 4.0.0-B20230531.1404. The vulnerability is a buffer overflow in the dnsaddr parameter of the formDhcpv6s interface, caused by insufficient validation of input length/size. This can lead to arbitrary code execution or a Denial of Service, wit...

CVE-2025-45866

The TOTOLINK A3002R wireless router (version v4.0.0-B20230531.1404 ) is vulnerable to a buffer overflow in the boa microprogramming software . The flaw exists within the formDhcpv6s interface because the addrPoolEnd parameter fails to correctly validate the length of the input data. An attacker c...

CVE-2025-45863

The TOTOLINK A3002R wireless router (v4.0.0-B20230531.1404) is vulnerable to a buffer overflow in the formMapDelDevice interface. The issue occurs because the macstr parameter fails to properly validate the length and size of input data within the boa web server's embedded microprogramming softwa...

PT-2025-21030 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: A buffer overflow issue was discovered via the routername parameter in the "formDnsv6" interface. Recommendations: For TOTOLINK A3002R version 4.0.0-B20230531.1404, avoid using the...

CVE-2025-45861: Buffer Copy without Checking Size of Input

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface...

TOTOLINK A3002R security vulnerabilities

The TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from the failure of the addrPoolStart parameter in the formDhcpv6s interface to correctly validate the length size of the input data, no...

CVE-2025-45861

CVE-2025-45861 affects TOTOLINK A3002R, specifically version 4.0.0-B20230531.1404, where a buffer overflow can be triggered via the routername parameter in the formDnsv6 interface. The issue is described across multiple sources as allowing potential arbitrary code execution or denial of service, ...

CVE-2025-45867

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the staticdns1 parameter in the formIpv6Setup interface...

CVE-2025-45864

The TOTOLINK A3002R wireless router (firmware v4.0.0-B20230531.1404) is vulnerable to a buffer overflow in the formDhcpv6s interface of the boa microprogramming software . The flaw is caused by the addrPoolStart parameter failing to properly validate the length of input data. An attacker can expl...

CVE-2025-45861

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface...

CVE-2025-45858

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN00459fdc function...

CVE-2025-4496

A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buff...

TOTOLINK A3100R comment buffer overflow vulnerability

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. The TOTOLINK A3100R suffers from a buffer overflow vulnerability, which originates from the comment parameter in setIpPortFilterRules, that can be exploited by an attacker to crash an application or execute...

TOTOLINK A720R Router cstecgi.cgi Privilege Escalation

The vulnerability of the cstecgi.cgi /cgi-bin/cstecgi.cgi script in the TOTOLINK A720R router software is related to errors in access control when processing the topicurl parameter. Exploiting this vulnerability allows a remote attacker to increase their privileges by sending specially crafted PO...

CVE-2025-4461

A vulnerability classified as problematic was found in TOTOLINK N150RT 3.4.0-B20190525. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public...