A3002r Firmware@1.1.1-b20200824.0128 Security Vulnerabilities and Issues — A3002r Firmware@1.1.1-b20200824.0128 CVE List

Lucene search

TotolinkA3002r Firmware1.1.1-b20200824.0128

9 matches found

CVE•added 2025/02/28 7:15 p.m.•76 views

CVE-2025-25610

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_gw parameter in the formIpv6Setup interface of /bin/boa.

8CVSS7.5AI score0.00036EPSS

CVE•added 2025/02/28 7:15 p.m.•76 views

CVE-2025-25635

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoe_dns1 parameter in the formIpv6Setup interface of /bin/boa.

8CVSS7.5AI score0.00036EPSS

CVE•added 2025/02/28 7:15 p.m.•68 views

CVE-2025-25609

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_ipv6 parameter in the formIpv6Setup interface of /bin/boa

8CVSS7.5AI score0.00036EPSS

CVE•added 2022/09/06 5:15 p.m.•48 views

CVE-2022-40109

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa.

9.8CVSS9.3AI score0.00097EPSS

CVE•added 2022/09/06 5:15 p.m.•45 views

CVE-2022-40111

In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmware.

9.8CVSS9.3AI score0.00129EPSS

CVE•added 2022/09/06 5:15 p.m.•41 views

CVE-2022-40110

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa.

7.5CVSS7.5AI score0.00139EPSS

CVE•added 2022/09/06 5:15 p.m.•39 views

CVE-2022-40112

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa.

7.5CVSS7.5AI score0.00139EPSS

CVE•added 2025/06/22 6:15 p.m.•9 views

CVE-2025-6487

A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been rated as critical. This issue affects the function formRoute of the file /boafrm/formRoute. The manipulation of the argument subnet leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit ...

9CVSS8.9AI score0.0014EPSS

CVE•added 2025/06/22 6:15 p.m.•8 views

CVE-2025-6486

A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been declared as critical. This vulnerability affects the function formWlanMultipleAP of the file /boafrm/formWlanMultipleAP. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack can be...

9CVSS8.9AI score0.0014EPSS