Lucene search

K

A3002R Firmware Security Vulnerabilities - CVSS Score 9 - 10

cve

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa.

9.8CVSS

9.3AI Score

0.013EPSS

2022-09-06 05:15 PM

34

3

cve

In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmware.

9.8CVSS

9.3AI Score

0.013EPSS

2022-09-06 05:15 PM

35

3

cve

TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncrypt, there is a lack of length restriction on the wlan_ssid field. This oversight leads to potential buffer overflow under specific circumst...

9.8CVSS

7.7AI Score

0.005EPSS

2024-08-28 08:15 PM

25

cve

TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentControl.

9.8CVSS

7.5AI Score

0.009EPSS

2024-08-12 03:15 PM

24