GCVE - cpe:2.3:a:totolink:a3002mu:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:totolink:a3002mu:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	A3002Mu (`fefcff42-7645-5173-93e4-61b872bb21e9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-93740`	vulnerable	2026-10-13 12:28:56.160675	Totolink A3002MU formWlEncrypt buffer overflow CRITICAL (10) A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Published: 2026-09-18T21:45:12.370Z Updated: 2026-09-21T15:59:54.262Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/407550 https://vuldb.com/vuln/407550/cti https://vuldb.com/cve/CVE-2026-93740 https://vuldb.com/submit/914019 https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A3002MU/bof-formWlEncrypt.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-93741`	vulnerable	2026-10-13 12:28:56.110723	Totolink A3002MU formWlWds buffer overflow CRITICAL (10) A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. Published: 2026-09-19T05:45:12.599Z Updated: 2026-09-22T15:54:46.600Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/407551 https://vuldb.com/vuln/407551/cti https://vuldb.com/cve/CVE-2026-93741 https://vuldb.com/submit/914020 https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A3002MU/bof-formWlWds.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-93739`	vulnerable	2026-10-13 12:28:56.016328	Totolink A3002MU formWlAc buffer overflow CRITICAL (9.9) A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Published: 2026-09-18T21:15:07.518Z Updated: 2026-09-23T17:50:46.626Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/407549 https://vuldb.com/vuln/407549/cti https://vuldb.com/cve/CVE-2026-93739 https://vuldb.com/submit/914018 https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A3002MU/bof-formWlAc.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-93738`	vulnerable	2026-10-13 12:28:55.852331	Totolink A3002MU formSchedule buffer overflow CRITICAL (9.9) A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the file /boafrm/formSchedule. Performing a manipulation of the argument webpage results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Published: 2026-09-18T21:00:10.262Z Updated: 2026-09-22T15:44:06.929Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/407548 https://vuldb.com/vuln/407548/cti https://vuldb.com/cve/CVE-2026-93738 https://vuldb.com/submit/914017 https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A3002MU/bof-formSchedule.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-93742`	vulnerable	2026-10-13 12:28:55.837739	Totolink A3002MU formWsc command injection CRITICAL (9.9) A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of the file /boafrm/formWsc. This manipulation of the argument localPin causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Published: 2026-09-19T08:30:21.147Z Updated: 2026-09-21T18:28:19.220Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/407552 https://vuldb.com/vuln/407552/cti https://vuldb.com/cve/CVE-2026-93742 https://vuldb.com/submit/914021 https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A3002MU/rce-formWsc.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-90605`	vulnerable	2026-09-16 04:33:05.544518	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-90604`	vulnerable	2026-09-16 04:33:05.505272	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-90608`	vulnerable	2026-09-16 04:33:05.418688	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-90606`	vulnerable	2026-09-16 04:33:05.408019	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-90607`	vulnerable	2026-09-16 04:33:05.229822	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-6194`	vulnerable	2026-06-08 08:07:04.538281	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

A3002Mu

Notes

PURL mappings

Vulnerability references

Contribute