TOTOLINK A3002R bupload.html component command injection vulnerability

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. The TOTOLINK A3002R suffers from a command injection vulnerability that stems from the bupload.html...

CVE-2025-55590

CVE-2025-55590 concerns the TOTOLINK A3002R router (version 4.0.0-B20230531.1404). The issue is a command injection vulnerability in the bupload.html component, caused by improper filtering of constructed command characters. The NVD entry lists a CVSSv3.1 base score of 6.5 (Network attack, Low co...

TOTOLINK A3002R 安全漏洞

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. The TOTOLINK A3002R suffers from a command injection vulnerability that stems from the bupload.html...