Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
TotolinkA3002r Firmware

31 matches found

CVE
CVE•added 2020/12/09 9:15 p.m.•75 views

CVE-2020-25499

TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router.

9CVSS8.8AI score0.21814EPSS
CVE
CVE•added 2025/03/28 10:15 p.m.•52 views

CVE-2025-25579

TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.

9.8CVSS7.5AI score0.10129EPSS
CVE
CVE•added 2022/09/06 5:15 p.m.•48 views

CVE-2022-40109

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa.

9.8CVSS9.3AI score0.00097EPSS
CVE
CVE•added 2024/08/28 8:15 p.m.•47 views

CVE-2024-34195

TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncrypt, there is a lack of length restriction on the wlan_ssid field. This oversight leads to potential buffer overflow under specific circumst...

9.8CVSS7.7AI score0.00664EPSS
CVE
CVE•added 2022/09/06 5:15 p.m.•45 views

CVE-2022-40111

In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmware.

9.8CVSS9.3AI score0.00129EPSS
CVE
CVE•added 2024/08/12 3:15 p.m.•45 views

CVE-2024-42520

TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentControl.

9.8CVSS7.5AI score0.003EPSS
CVE
CVE•added 2025/05/13 7:15 p.m.•34 views

CVE-2025-45861

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface.

9.8CVSS8AI score0.00125EPSS
CVE
CVE•added 2025/05/13 8:15 p.m.•34 views

CVE-2025-45863

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface.

9.8CVSS7.9AI score0.00125EPSS
CVE
CVE•added 2025/05/13 7:15 p.m.•33 views

CVE-2025-45865

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface.

9.8CVSS8AI score0.00125EPSS
CVE
CVE•added 2025/05/17 8:15 p.m.•31 views

CVE-2025-4835

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redire...

9CVSS8.9AI score0.00143EPSS
CVE
CVE•added 2025/05/17 10:15 a.m.•29 views

CVE-2025-4823

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is the function submit-url of the file /boafrm/formReflashClientTbl of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The ...

9CVSS8.8AI score0.00143EPSS
CVE
CVE•added 2025/05/16 12:15 a.m.•27 views

CVE-2025-4731

A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type/ip_subnet leads to buffer overflow. It is ...

9CVSS9AI score0.00143EPSS
CVE
CVE•added 2025/05/16 1:15 a.m.•27 views

CVE-2025-4732

A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr leads to buffer overflow. The attack can ...

9CVSS8.9AI score0.00143EPSS
CVE
CVE•added 2025/05/17 10:15 a.m.•27 views

CVE-2025-4824

A vulnerability classified as critical has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formWsc of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible...

9CVSS9AI score0.00143EPSS
CVE
CVE•added 2025/05/13 4:15 p.m.•26 views

CVE-2025-45858

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.

9.8CVSS8AI score0.08791EPSS
CVE
CVE•added 2025/05/17 11:15 a.m.•26 views

CVE-2025-4826

A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This issue affects some unknown processing of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads ...

9CVSS8.9AI score0.00143EPSS
CVE
CVE•added 2025/05/17 3:15 p.m.•25 views

CVE-2025-4829

A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected by this vulnerability is the function sub_40BE30 of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffe...

9CVSS8.9AI score0.00143EPSS
CVE
CVE•added 2025/05/17 5:15 p.m.•25 views

CVE-2025-4831

A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formSiteSurveyProfile of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer ove...

9CVSS8.9AI score0.00143EPSS
CVE
CVE•added 2025/05/17 6:15 p.m.•25 views

CVE-2025-4833

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This issue affects some unknown processing of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. T...

9CVSS8.9AI score0.00143EPSS
CVE
CVE•added 2025/05/17 7:15 p.m.•25 views

CVE-2025-4834

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been classified as critical. Affected is an unknown function of the file /boafrm/formSetLg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. I...

9CVSS9AI score0.00143EPSS
CVE
CVE•added 2025/05/16 12:15 a.m.•23 views

CVE-2025-4730

A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer o...

9CVSS8.8AI score0.00143EPSS
CVE
CVE•added 2025/05/16 1:15 a.m.•23 views

CVE-2025-4733

A vulnerability, which was classified as critical, has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This issue affects some unknown processing of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. ...

9CVSS7.2AI score0.00143EPSS
CVE
CVE•added 2025/05/17 4:15 p.m.•23 views

CVE-2025-4830

A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected by this issue is some unknown functionality of the file /boafrm/formSysCmd of the component HTTP POST Request Handler. The manipulation of the argument submit-url l...

9CVSS8.9AI score0.00143EPSS
CVE
CVE•added 2025/05/17 3:15 p.m.•21 views

CVE-2025-4827

A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formSaveConfig of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflo...

9CVSS7.2AI score0.00143EPSS
CVE
CVE•added 2025/05/17 10:15 a.m.•20 views

CVE-2025-4825

A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file /boafrm/formDMZ of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The atta...

9CVSS8.9AI score0.00143EPSS
CVE
CVE•added 2025/05/17 5:15 p.m.•19 views

CVE-2025-4832

A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overfl...

9CVSS7.3AI score0.00143EPSS
CVE
CVE•added 2025/06/17 6:15 a.m.•18 views

CVE-2025-6164

A vulnerability was found in TOTOLINK A3002R 4.0.0-B20230531.1404. It has been classified as critical. This affects an unknown part of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to ini...

9CVSS8.9AI score0.00192EPSS
CVE
CVE•added 2025/06/17 1:15 a.m.•11 views

CVE-2025-6149

A vulnerability classified as critical has been found in TOTOLINK A3002R 4.0.0-B20230531.1404. Affected is an unknown function of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch th...

9CVSS9AI score0.00192EPSS
CVE
CVE•added 2025/06/22 6:15 p.m.•8 views

CVE-2025-6487

A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been rated as critical. This issue affects the function formRoute of the file /boafrm/formRoute. The manipulation of the argument subnet leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit ...

9CVSS8.9AI score0.00141EPSS
CVE
CVE•added 2025/06/21 1:15 a.m.•7 views

CVE-2025-6393

A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.1404/4.0.0-B20230721.1521/4.1.2cu.5232_B20210713. It has been classified as critical. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST Request Han...

9CVSS9AI score0.00402EPSS
CVE
CVE•added 2025/06/22 6:15 p.m.•7 views

CVE-2025-6486

A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been declared as critical. This vulnerability affects the function formWlanMultipleAP of the file /boafrm/formWlanMultipleAP. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack can be...

9CVSS8.9AI score0.00141EPSS