The vulnerability of the bupload.html component in the Totolink A3002R router’s microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the bupload.html component in the Totolink A3002R router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK A3002R bupload.html component command injection vulnerability

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. The TOTOLINK A3002R suffers from a command injection vulnerability that stems from the bupload.html...

TOTOLINK A3002R 安全漏洞

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. The TOTOLINK A3002R suffers from a command injection vulnerability that stems from the bupload.html...

CVE-2025-55590: Improper Neutralization of Special Elements used in a Command

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an command injection vulnerability via the component bupload.html...

CVE-2025-55590

The TOTOLINK A3002R wireless router, specifically version 4.0.0-B20230531.1404 , contains a command injection vulnerability within the bupload.html component. The root cause is a lack of sufficient measures to clean data at the control level and a failure to properly filter constructed command sp...