Approved changes feed: RSS · Atom

cpe:2.3:a:totolink:n302r_plus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductN302R Plus (e19c0055-9837-520b-936d-b85d4b8d891c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5672 vulnerable 2026-06-08 07:37:25.427770 TOTOLINK N302R Plus HTTP POST Request formFilter buffer overflow
HIGH (8.8)
A vulnerability has been found in TOTOLINK N302R Plus up to 3.4.0-B20201028 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-05T17:31:10.945Z
Updated: 2025-06-05T17:43:03.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5671 vulnerable 2026-06-08 07:37:25.425479 TOTOLINK N302R Plus HTTP POST Request formPortFw buffer overflow
HIGH (8.8)
A vulnerability, which was classified as critical, was found in TOTOLINK N302R Plus up to 3.4.0-B20201028. Affected is an unknown function of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-05T17:31:07.818Z
Updated: 2025-06-05T17:47:37.026Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.