CVE-2025-6163

A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...

CVE-2025-6163

CVE-2025-6163 affects TOTOLINK A3002RU (3.0.0-B20230809.1615). The /boafrm/formMultiAP endpoint of the HTTP POST Request Handler accepts a manipulated submit-url input leading to a buffer overflow, enabling remote exploitation. Documents indicate the vulnerability is high severity with likely cod...

CVE-2025-6163 TOTOLINK A3002RU HTTP POST Request formMultiAP buffer overflow

A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...

CVE-2025-6163 TOTOLINK A3002RU HTTP POST Request formMultiAP buffer overflow

A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...

CVE-2025-6148

A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack...

CVE-2025-6148 TOTOLINK A3002RU HTTP POST Request formSysLog buffer overflow

A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack...

CVE-2025-6148

TOTOLINK A3002RU (version 3.0.0-B20230809.1615) contains a buffer overflow in the HTTP POST Request Handler’s /boafrm/formSysLog when processing the submit-url argument. CVE-2025-6148 is rated high/critical with remote exploitability. Several sources confirm that the vulnerability can be triggere...

CVE-2025-6148 TOTOLINK A3002RU HTTP POST Request formSysLog buffer overflow

A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack...

TOTOLINK A3002RU 安全漏洞

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. The TOTOLINK A3002RU version 3.0.0-B20230809.1615 suffers from a buffer overflow vulnerability, which originates from the failure of the submit-url parameter in the /boafrm/formSysLog file to correctly validate...

TOTOLINK A3002RU 安全漏洞

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK A3002RU version 3.0.0-B20230809.1615, which originates from a failure of the parameter submit-url in the file /boafrm/formMultiAP in the HTTP POST Request...

PT-2025-26480 · Totolink · Totolink A702R +2

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R versions 3.0.0-B20230809.1615 through 4.1.2cu.5232 B20210713 TOTOLINK A3002R versions 3.0.0-B20230809.1615 through 4.1.2cu.5232 B20210713 TOTOLINK A3002RU versions 3.0.0-B20230809.1615 through 4.1.2cu.5232 B20210713 TOTOLINK...

TOTOLINK A3002RU Virtual Server Page Component Cross-Site Scripting Vulnerability

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A cross-site scripting vulnerability exists in the TOTOLINK A3002RU, which stems from the lack of effective filtering and escaping of user-supplied data by the Virtual Server Page component parameter servicetype...

TOTOLINK A3002RU IP Port Filtering Page Component Cross-Site Scripting Vulnerability

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A cross-site scripting vulnerability exists in the TOTOLINK A3002RU, which stems from the lack of effective filtering and escaping of user-supplied data by the IP Port Filtering Page component parameter Comment,...

TOTOLINK A3002RU MAC Filtering Page Component Cross-Site Scripting Vulnerability

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A cross-site scripting vulnerability exists in the TOTOLINK A3002RU, which stems from the lack of effective filtering and escaping of user-supplied data by the MAC Filtering Page component parameter Comment, for...

TOTOLINK A3002RU NAT Mapping Page Component Cross-Site Scripting Vulnerability

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. The TOTOLINK A3002RU suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the NAT Mapping Page component parameter Comment, for...

PT-2025-25600 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002RU version 3.0.0-B20230809.1615 Description: A critical issue affects the HTTP POST Request Handler component due to a buffer overflow when processing the file /boafrm/formSysLog. The manipulation of the submit-url argument lead...

The vulnerability of the MAC filtering configuration of the Firewall module in TOTOLINK A3002RU microprogrammed router software allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the MAC filtering configuration in the TOTOLINK A3002RU router’s microprogrammed software firewall module is related to the lack of protection for the website structure when processing the “Comment” parameter. Exploiting this vulnerability allows a remote attacker to perform...

The vulnerability of the NAT Mapping configuration of the Virtual Server module in the microprogramming-based router software of TOTOLINK A3002RU allows attackers to carry out cross-site scripting (XSS) attacks.

The vulnerability of the NAT Mapping configuration of the Virtual Server module in the TOTOLINK A3002RU router software lies in the lack of protection for the website structure when processing the Service Type parameter. Exploiting this vulnerability allows an attacker to perform cross-site...

The vulnerability of the NAT Mapping module in TOTOLINK A3002RU software allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the NAT Mapping module in TOTOLINK A3002RU router microprogramming software is related to the lack of measures taken to protect the website structure when processing the Comment parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting...

CVE-2025-5508

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been rated as problematic. Affected by this issue is some unknown functionality of the component IP Port Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack may be launched...