Lucene search
K

19 matches found

BDU FSTEC
BDU FSTEC
added 2025/06/19 12:0 a.m.4 views

The vulnerability of the built-in boa server (/boafrm/formMultiAP) of the TOTOLINK A3002RU router’s microprogramming software allows a intruder to cause a service failure.

The vulnerability of the built-in boa server /boafrm/formMultiAP of the TOTOLINK A3002RU router’s microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious...

9CVSS7.8AI score0.00761EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/19 12:0 a.m.4 views

The vulnerability of the built-in boa server (/boafrm/formMultiAP) of the TOTOLINK EX1200T router’s microprogramming software allows a intruder to cause a service failure.

The vulnerability of the built-in boa server /boafrm/formMultiAP of the TOTOLINK EX1200T router’s microprogramming system is related to the issue of the operation exceeding the buffer boundaries in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious...

9CVSS7.8AI score0.00761EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/19 12:0 a.m.6 views

The vulnerability of the built-in boa server (/boafrm/formMultiAP) of TOTOLINK X15 router microprogramming software allows a intruder to cause a service failure.

The vulnerability of the built-in boa server /boafrm/formMultiAP of the TOTOLINK X15 router software lies in the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor to cause service failures by...

9CVSS7.8AI score0.00802EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2025/06/17 5:15 a.m.3 views

CVE-2025-6162

A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

8.7CVSS6.5AI score0.00761EPSS
Exploits1References6
OSV
OSV
added 2025/06/17 5:15 a.m.3 views

CVE-2025-6163

A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...

8.7CVSS6.5AI score0.00761EPSS
Exploits1References6
OSV
OSV
added 2025/06/17 1:15 a.m.3 views

CVE-2025-6150

A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...

8.7CVSS6.3AI score0.00802EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/06/17 12:0 a.m.1 views

TOTOLINK A3002RU 安全漏洞

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK A3002RU version 3.0.0-B20230809.1615, which originates from a failure of the parameter submit-url in the file /boafrm/formMultiAP in the HTTP POST Request...

9CVSS8.1AI score0.00761EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/06/17 12:0 a.m.2 views

TOTOLINK X15 安全漏洞

TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK X15 version 1.0.0-B20230714.1105, which originates from the submit-url parameter in the /boafrm/formMultiAP file failing to correctly validate the length and size...

9CVSS9AI score0.00802EPSS
Exploits1References6
OSV
OSV
added 2024/05/14 3:38 p.m.2 views

CVE-2024-34196

Totolink AC1200 Wireless Dual Band Gigabit Router A3002RUV3 Firmware V3.0.0-B20230809.1615 is vulnerable to Buffer Overflow. The "boa" program allows attackers to modify the value of the "vwlanidx" field via "formMultiAP". This can lead to a stack overflow through the "formWlEncrypt" CGI function...

8.8CVSS5.9AI score0.00738EPSS
Exploits1References1
NVD
NVD
added 2024/05/14 3:38 p.m.8 views

CVE-2024-34196

Totolink AC1200 Wireless Dual Band Gigabit Router A3002RUV3 Firmware V3.0.0-B20230809.1615 is vulnerable to Buffer Overflow. The "boa" program allows attackers to modify the value of the "vwlanidx" field via "formMultiAP". This can lead to a stack overflow through the "formWlEncrypt" CGI function...

8.8CVSS7.1AI score0.00738EPSS
Exploits1References1
CVE
CVE
added 2024/05/08 9:35 p.m.56 views

CVE-2024-34196

Totolink AC1200 Wireless Dual Band Gigabit Router A3002RU_V3 firmware V3.0.0-B20230809.1615 is affected by a buffer overflow in the boa CGI, allowing an attacker to modify the vwlan_idx field via formMultiAP. By crafting malformed HTTP requests with a WLAN SSID exceeding the expected length, this...

8.8CVSS7.4AI score0.00738EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/08 12:0 a.m.3 views

PT-2024-25733 · Totolink · Totolink Ac1200 Wireless Dual Band Gigabit Router

Name of the Vulnerable Software and Affected Versions: Totolink AC1200 Wireless Dual Band Gigabit Router A3002RU V3 version V3.0.0-B20230809.1615 Description: The issue allows attackers to modify the value of the vwlan idx field via "formMultiAP". This can lead to a stack overflow through the...

8.8CVSS7.7AI score0.00738EPSS
Exploits1References2
CNVD
CNVD
added 2023/10/27 12:0 a.m.2 views

TOTOLINK X2000R Gh formMultiAP Method Buffer Overflow Vulnerability

TOTOLINK X2000R Gh is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formMultiAP method...

9.8CVSS8.2AI score0.00807EPSS
Exploits1References1
OSV
OSV
added 2023/10/25 6:17 p.m.2 views

CVE-2023-46552

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP...

9.8CVSS5.8AI score0.00807EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/10/25 6:17 p.m.2 views

CVE-2023-46552

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP...

9.8CVSS5.8AI score0.00807EPSS
Exploits1References3
NVD
NVD
added 2023/10/25 6:17 p.m.23 views

CVE-2023-46552

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP...

9.8CVSS9.7AI score0.00807EPSS
Exploits1References2
Prion
Prion
added 2023/10/25 6:17 p.m.23 views

Stack overflow

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP...

7.5CVSS9.6AI score0.00807EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/25 12:0 a.m.4 views

PT-2023-30082 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formMultiAP. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the...

9.8CVSS7.7AI score0.00807EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/10/25 12:0 a.m.11 views

CVE-2023-46552

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP...

9.7AI score0.00807EPSS
Exploits1References2
Rows per page
Query Builder