Approved changes feed: RSS · Atom
cpe:2.3:a:totolink:a3002mu:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | A3002Mu (fefcff42-7645-5173-93e4-61b872bb21e9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-90605 |
vulnerable | 2026-09-16 04:33:05.544518 |
Totolink A3002MU boa formFilter buffer overflow
CRITICAL (9.9)
A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the function formFilter of the file /boafrm/formFilter of the component boa. Executing a manipulation of the argument ip6addr can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-09-13T23:30:11.008Z
Updated: 2026-09-15T13:58:48.810Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90604 |
vulnerable | 2026-09-16 04:33:05.505272 |
Totolink A3002MU Anchor Tag cross site scripting
LOW (3.5)
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. This affects an unknown part of the component Anchor Tag Handler. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Published: 2026-09-13T23:15:14.381Z
Updated: 2026-09-14T15:21:21.405Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90608 |
vulnerable | 2026-09-16 04:33:05.418688 |
Totolink A3002MU boa formPortFw buffer overflow
CRITICAL (9.9)
A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw of the file /boafrm/formPortFw of the component boa. This manipulation of the argument service_type causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Published: 2026-09-14T00:15:07.635Z
Updated: 2026-09-16T14:36:08.294Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90606 |
vulnerable | 2026-09-16 04:33:05.408019 |
Totolink A3002MU boa formIpv6Setup buffer overflow
CRITICAL (9.9)
A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue affects the function formIpv6Setup of the file /boafrm/formIpv6Setup of the component boa. The manipulation of the argument static_ipv6 leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-09-13T23:45:10.894Z
Updated: 2026-09-15T18:07:33.379Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90607 |
vulnerable | 2026-09-16 04:33:05.229822 |
Totolink A3002MU boa formNewSchedule buffer overflow
CRITICAL (9.9)
A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used.
Published: 2026-09-14T00:00:09.678Z
Updated: 2026-09-14T15:58:54.415Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6194 |
vulnerable | 2026-06-08 08:07:04.538281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.