GCVE - cpe:2.3:o:totolink:n302r_plus_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:n302r_plus_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	N302R Plus Firmware (`3f184d77-8e8a-51cc-b15e-9ba87e84ce0a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-5672`	vulnerable	2026-06-08 07:37:25.427936	TOTOLINK N302R Plus HTTP POST Request formFilter buffer overflow HIGH (8.8) A vulnerability has been found in TOTOLINK N302R Plus up to 3.4.0-B20201028 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-05T17:31:10.945Z Updated: 2025-06-05T17:43:03.220Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311161 https://vuldb.com/?ctiid.311161 https://vuldb.com/?submit.590094 https://github.com/byxs0x0/cve2/blob/main/530/2.md https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5671`	vulnerable	2026-06-08 07:37:25.426315	TOTOLINK N302R Plus HTTP POST Request formPortFw buffer overflow HIGH (8.8) A vulnerability, which was classified as critical, was found in TOTOLINK N302R Plus up to 3.4.0-B20201028. Affected is an unknown function of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-05T17:31:07.818Z Updated: 2025-06-05T17:47:37.026Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311160 https://vuldb.com/?ctiid.311160 https://vuldb.com/?submit.590093 https://github.com/byxs0x0/cve2/blob/main/530/1.md https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25499`	vulnerable	2026-06-08 05:22:36.791699	Details available TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router. Published: 2020-12-09T20:30:55.000Z Updated: 2024-08-04T15:33:05.689Z Open on db.gcve.eu Reference links https://www.totolink.net/home/index/newsss/id/196.html https://github.com/kdoos/Vulnerabilities/blob/main/RCE_TOTOLINK-A3002RU-V2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.