Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a3002r_firmware:3.0.0-b20230809.1615:*:*:*:*:*:*:*

part: o version: 3.0.0-b20230809.1615 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA3002R Firmware (60148191-7756-532d-9168-88651bbe56db)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6337 vulnerable 2026-06-08 07:43:14.865438 TOTOLINK A3002R/A3002RU HTTP POST Request formTmultiAP buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615/4.0.0-B20230531.1404. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formTmultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T12:00:18.533Z
Updated: 2025-06-23T20:26:09.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4835 vulnerable 2026-06-08 07:29:17.369948 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWlanRedirect buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-17T19:31:07.457Z
Updated: 2025-05-19T14:42:37.586Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4834 vulnerable 2026-06-08 07:29:17.368983 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSetLg buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been classified as critical. Affected is an unknown function of the file /boafrm/formSetLg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-17T19:00:10.523Z
Updated: 2025-05-19T14:43:12.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4833 vulnerable 2026-06-08 07:29:17.367983 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formNtp buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This issue affects some unknown processing of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-17T17:31:05.428Z
Updated: 2025-05-19T15:23:40.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4832 vulnerable 2026-06-08 07:29:17.367293 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDosCfg buffer overflow
HIGH (8.8)
A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-17T17:00:10.627Z
Updated: 2025-05-19T15:23:46.524Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4831 vulnerable 2026-06-08 07:29:17.366460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4830 vulnerable 2026-06-08 07:29:17.365456 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4829 vulnerable 2026-06-08 07:29:17.364424 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4827 vulnerable 2026-06-08 07:29:17.353998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4826 vulnerable 2026-06-08 07:29:17.352675 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4825 vulnerable 2026-06-08 07:29:17.351430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4824 vulnerable 2026-06-08 07:29:17.350246 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4823 vulnerable 2026-06-08 07:29:17.349107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4733 vulnerable 2026-06-08 07:29:17.175758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4732 vulnerable 2026-06-08 07:29:17.175062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4731 vulnerable 2026-06-08 07:29:17.174330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4730 vulnerable 2026-06-08 07:29:17.173418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4729 vulnerable 2026-06-08 07:29:17.169846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.