Totolink A3002r Firmware 4.0.0-b20230531.1404
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:a3002r_firmware:4.0.0-b20230531.1404:*:*:*:*:*:*:*
part: o version: 4.0.0-b20230531.1404 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | A3002R Firmware (60148191-7756-532d-9168-88651bbe56db) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-6393 |
vulnerable | 2026-06-08 07:43:14.975866 |
TOTOLINK A702R/A3002R/A3002RU/EX1200T HTTP POST Request formIPv6Addr buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.1404/4.0.0-B20230721.1521/4.1.2cu.5232_B20210713. It has been classified as critical. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-21T01:00:20.713Z
Updated: 2025-06-23T14:43:28.605Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6337 |
vulnerable | 2026-06-08 07:43:14.861606 |
TOTOLINK A3002R/A3002RU HTTP POST Request formTmultiAP buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615/4.0.0-B20230531.1404. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formTmultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T12:00:18.533Z
Updated: 2025-06-23T20:26:09.429Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6164 |
vulnerable | 2026-06-08 07:43:14.453747 |
TOTOLINK A3002R HTTP POST Request formMultiAP buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A3002R 4.0.0-B20230531.1404. It has been classified as critical. This affects an unknown part of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-17T05:31:07.479Z
Updated: 2025-06-17T13:36:40.928Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6149 |
vulnerable | 2026-06-08 07:43:14.415779 |
TOTOLINK A3002R HTTP POST Request formSysLog buffer overflow
HIGH (8.8)
A vulnerability classified as critical has been found in TOTOLINK A3002R 4.0.0-B20230531.1404. Affected is an unknown function of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-17T00:31:07.076Z
Updated: 2025-06-17T13:46:31.392Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55591 |
vulnerable | 2026-06-08 07:33:15.049860 |
Details available
TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint.
Published: 2025-08-18T00:00:00.000Z
Updated: 2025-08-18T19:59:07.275Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55590 |
vulnerable | 2026-06-08 07:33:15.049436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55589 |
vulnerable | 2026-06-08 07:33:15.049156 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55588 |
vulnerable | 2026-06-08 07:33:15.048875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55587 |
vulnerable | 2026-06-08 07:33:15.048607 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55586 |
vulnerable | 2026-06-08 07:33:15.048320 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55585 |
vulnerable | 2026-06-08 07:33:15.047904 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55584 |
vulnerable | 2026-06-08 07:33:15.046685 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45867 |
vulnerable | 2026-06-08 07:25:11.136005 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45866 |
vulnerable | 2026-06-08 07:25:11.135738 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45865 |
vulnerable | 2026-06-08 07:25:11.135471 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45864 |
vulnerable | 2026-06-08 07:25:11.135175 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45863 |
vulnerable | 2026-06-08 07:25:11.134798 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45862 |
vulnerable | 2026-06-08 07:25:11.134375 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45861 |
vulnerable | 2026-06-08 07:25:11.133957 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45859 |
vulnerable | 2026-06-08 07:25:11.133484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45858 |
vulnerable | 2026-06-08 07:25:11.132196 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25579 |
vulnerable | 2026-06-08 07:12:51.234005 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-54907 |
vulnerable | 2026-06-08 06:54:16.855557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42520 |
vulnerable | 2026-06-08 06:45:46.680067 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33820 |
vulnerable | 2026-06-08 06:37:32.178561 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.