Totolink A3002R Router Arbitrary Command Execution

The vulnerability of the bupload.html component in the Totolink A3002R router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK A3002R bupload.html component command injection vulnerability

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. The TOTOLINK A3002R suffers from a command injection vulnerability that stems from the bupload.html...

CVE-2025-55590: Improper Neutralization of Special Elements used in a Command

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an command injection vulnerability via the component bupload.html...

TOTOLINK A3002R security vulnerabilities

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. The TOTOLINK A3002R suffers from a command injection vulnerability that stems from the bupload.html...

CVE-2025-55590

The TOTOLINK A3002R wireless router (specifically version v4.0.0-B20230531.1404 ) is vulnerable to a command injection flaw in the bupload.html component. The root cause is a lack of sufficient input sanitization and measures to clean data at the control level, specifically failing to filter spec...