Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a702r_firmware:3.0.0-b20230809.1615:*:*:*:*:*:*:*

part: o version: 3.0.0-b20230809.1615 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA702R Firmware (f9d53206-c36b-541b-bfef-61cc57f73054)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4835 vulnerable 2026-06-08 07:29:17.369792 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWlanRedirect buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-17T19:31:07.457Z
Updated: 2025-05-19T14:42:37.586Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4834 vulnerable 2026-06-08 07:29:17.368778 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSetLg buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been classified as critical. Affected is an unknown function of the file /boafrm/formSetLg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-17T19:00:10.523Z
Updated: 2025-05-19T14:43:12.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4833 vulnerable 2026-06-08 07:29:17.367940 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formNtp buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This issue affects some unknown processing of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-17T17:31:05.428Z
Updated: 2025-05-19T15:23:40.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4832 vulnerable 2026-06-08 07:29:17.367258 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDosCfg buffer overflow
HIGH (8.8)
A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-17T17:00:10.627Z
Updated: 2025-05-19T15:23:46.524Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4831 vulnerable 2026-06-08 07:29:17.366318 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSiteSurveyProfile buffer overflow
HIGH (8.8)
A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formSiteSurveyProfile of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-17T16:31:06.593Z
Updated: 2025-05-20T14:53:45.601Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4830 vulnerable 2026-06-08 07:29:17.365299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4829 vulnerable 2026-06-08 07:29:17.364259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4827 vulnerable 2026-06-08 07:29:17.353851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4826 vulnerable 2026-06-08 07:29:17.352545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4825 vulnerable 2026-06-08 07:29:17.351367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4824 vulnerable 2026-06-08 07:29:17.349931 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4823 vulnerable 2026-06-08 07:29:17.348222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.