Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a3002ru_firmware:3.0.0-b20230809.1615:*:*:*:*:*:*:*

part: o version: 3.0.0-b20230809.1615 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA3002Ru Firmware (9447ba9f-bceb-5a2e-b96d-a49ae208e097)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6953 vulnerable 2026-06-08 07:43:16.721213 TOTOLINK A3002RU HTTP POST Request formParentControl buffer overflow
HIGH (8.8)
A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-01T13:32:06.793Z
Updated: 2025-07-01T13:57:11.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6939 vulnerable 2026-06-08 07:43:16.674380 TOTOLINK A3002RU HTTP POST Request formWlSiteSurvey buffer overflow
HIGH (8.8)
A vulnerability classified as critical has been found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formWlSiteSurvey of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-01T02:02:09.824Z
Updated: 2025-07-01T13:20:36.201Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6393 vulnerable 2026-06-08 07:43:14.975710 TOTOLINK A702R/A3002R/A3002RU/EX1200T HTTP POST Request formIPv6Addr buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.1404/4.0.0-B20230721.1521/4.1.2cu.5232_B20210713. It has been classified as critical. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-21T01:00:20.713Z
Updated: 2025-06-23T14:43:28.605Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6337 vulnerable 2026-06-08 07:43:14.861456 TOTOLINK A3002R/A3002RU HTTP POST Request formTmultiAP buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615/4.0.0-B20230531.1404. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formTmultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T12:00:18.533Z
Updated: 2025-06-23T20:26:09.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6163 vulnerable 2026-06-08 07:43:14.453088 TOTOLINK A3002RU HTTP POST Request formMultiAP buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-17T05:00:14.794Z
Updated: 2025-06-17T13:38:34.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6148 vulnerable 2026-06-08 07:43:14.412559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4835 vulnerable 2026-06-08 07:29:17.369995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4834 vulnerable 2026-06-08 07:29:17.369024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4833 vulnerable 2026-06-08 07:29:17.368121 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4832 vulnerable 2026-06-08 07:29:17.367330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4831 vulnerable 2026-06-08 07:29:17.366719 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4830 vulnerable 2026-06-08 07:29:17.365615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4829 vulnerable 2026-06-08 07:29:17.364566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4827 vulnerable 2026-06-08 07:29:17.354256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4826 vulnerable 2026-06-08 07:29:17.352724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4825 vulnerable 2026-06-08 07:29:17.351664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4824 vulnerable 2026-06-08 07:29:17.350505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4823 vulnerable 2026-06-08 07:29:17.349299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4733 vulnerable 2026-06-08 07:29:17.175915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4732 vulnerable 2026-06-08 07:29:17.175300 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4731 vulnerable 2026-06-08 07:29:17.174520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4730 vulnerable 2026-06-08 07:29:17.173663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4729 vulnerable 2026-06-08 07:29:17.171470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.