TOTOLINK A3002ru Firmware 1.0.8
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:a3002ru_firmware:1.0.8:*:*:*:*:*:*:*
part: o version: 1.0.8 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | A3002Ru Firmware (9447ba9f-bceb-5a2e-b96d-a49ae208e097) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-13317 |
vulnerable | 2026-06-08 05:10:51.144081 |
Details available
Password disclosure in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to obtain the plaintext password for the admin user by making a GET request for password.htm.
Published: 2018-11-26T22:00:00.000Z
Updated: 2024-08-05T09:00:34.707Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13316 |
vulnerable | 2026-06-08 05:10:51.143656 |
Details available
System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "subnet" POST parameter.
Published: 2018-11-27T21:00:00.000Z
Updated: 2024-08-05T09:00:34.991Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13315 |
vulnerable | 2026-06-08 05:10:51.143269 |
Details available
Incorrect access control in formPasswordSetup in TOTOLINK A3002RU version 1.0.8 allows attackers to change the admin user's password via an unauthenticated POST request.
Published: 2018-11-26T22:00:00.000Z
Updated: 2024-08-05T09:00:35.139Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13314 |
vulnerable | 2026-06-08 05:10:51.142958 |
Details available
System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ipAddr" POST parameter.
Published: 2018-11-27T21:00:00.000Z
Updated: 2024-08-05T09:00:35.022Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13313 |
vulnerable | 2026-06-08 05:10:51.142633 |
Admin Password returned in password.htm
In TOTOLINK A3002RU 1.0.8, the router provides a page that allows the user to change their account name and password. This page, password.htm, contains JavaScript which is used to confirm the user knows their current password before allowing them to change their password. However, this JavaScript contains the current user’s password in plaintext.
Published: 2020-02-24T18:16:17.000Z
Updated: 2024-08-05T09:00:34.856Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13312 |
vulnerable | 2026-06-08 05:10:51.142175 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13311 |
vulnerable | 2026-06-08 05:10:51.141772 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13310 |
vulnerable | 2026-06-08 05:10:51.141464 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13309 |
vulnerable | 2026-06-08 05:10:51.141029 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13308 |
vulnerable | 2026-06-08 05:10:51.140617 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13307 |
vulnerable | 2026-06-08 05:10:51.140286 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13306 |
vulnerable | 2026-06-08 05:10:51.139264 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.