Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
TotolinkA3002r Firmware4.0.0-b20230531.1404

17 matches found

CVE
CVE•added 2024/12/26 7:15 p.m.•52 views

CVE-2024-54907

TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc.

8.8CVSS7.6AI score0.00537EPSS
CVE
CVE•added 2025/03/28 10:15 p.m.•52 views

CVE-2025-25579

TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.

9.8CVSS7.5AI score0.11383EPSS
CVE
CVE•added 2024/08/12 3:15 p.m.•45 views

CVE-2024-42520

TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentControl.

9.8CVSS7.5AI score0.003EPSS
CVE
CVE•added 2025/05/13 7:15 p.m.•35 views

CVE-2025-45861

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface.

9.8CVSS8AI score0.00125EPSS
CVE
CVE•added 2025/05/13 8:15 p.m.•34 views

CVE-2025-45863

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface.

9.8CVSS7.9AI score0.00125EPSS
CVE
CVE•added 2025/05/13 3:15 p.m.•34 views

CVE-2025-45864

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface.

5.4CVSS7.9AI score0.00047EPSS
CVE
CVE•added 2025/05/13 7:15 p.m.•34 views

CVE-2025-45865

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface.

9.8CVSS8AI score0.00125EPSS
CVE
CVE•added 2024/05/01 4:15 p.m.•33 views

CVE-2024-33820

Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware V4.0.0-B20230531.1404 is vulnerable to Buffer Overflow via the formWlEncrypt function of the boa server. Specifically, they exploit the length of the wlan_ssid field triggers the overflow.

7.5CVSS6.8AI score0.00114EPSS
CVE
CVE•added 2025/05/13 3:15 p.m.•33 views

CVE-2025-45866

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s interface.

5.4CVSS7.9AI score0.00034EPSS
CVE
CVE•added 2025/05/13 3:15 p.m.•29 views

CVE-2025-45859

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interface.

5.4CVSS8AI score0.00047EPSS
CVE
CVE•added 2025/05/13 4:15 p.m.•27 views

CVE-2025-45858

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.

9.8CVSS8AI score0.08791EPSS
CVE
CVE•added 2025/05/13 3:15 p.m.•26 views

CVE-2025-45867

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the static_dns1 parameter in the formIpv6Setup interface.

5.4CVSS8AI score0.00047EPSS
CVE
CVE•added 2025/05/20 2:15 p.m.•22 views

CVE-2025-45862

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the interfacenameds parameter in the formDhcpv6s interface.

6.5CVSS7.5AI score0.0008EPSS
CVE
CVE•added 2025/06/17 6:15 a.m.•19 views

CVE-2025-6164

A vulnerability was found in TOTOLINK A3002R 4.0.0-B20230531.1404. It has been classified as critical. This affects an unknown part of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to ini...

9CVSS8.9AI score0.00165EPSS
CVE
CVE•added 2025/06/17 1:15 a.m.•12 views

CVE-2025-6149

A vulnerability classified as critical has been found in TOTOLINK A3002R 4.0.0-B20230531.1404. Affected is an unknown function of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch th...

9CVSS9AI score0.00165EPSS
CVE
CVE•added 2025/06/21 1:15 a.m.•8 views

CVE-2025-6393

A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.1404/4.0.0-B20230721.1521/4.1.2cu.5232_B20210713. It has been classified as critical. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST Request Han...

9CVSS9AI score0.004EPSS
CVE
CVE•added 2025/06/20 12:15 p.m.•6 views

CVE-2025-6337

A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615/4.0.0-B20230531.1404. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formTmultiAP of the component HTTP POST Request Handler. The manipulation of the argum...

9CVSS7.3AI score0.00165EPSS