GCVE - cpe:2.3:h:totolink:a3002ru-v2:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:totolink:a3002ru-v2:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	A3002Ru V2 (`7a74f2c1-74bb-59be-b060-66383099bd89`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-26732`	not_vulnerable	2026-06-08 07:53:21.690168	Details available TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPassword` parameters in the formFilter function. Published: 2026-02-17T00:00:00.000Z Updated: 2026-03-11T15:19:31.620Z Open on db.gcve.eu Reference links https://github.com/0xmania/cve/tree/main/TOTOLINK-A3002RU-boa-formFilter-StackOverflow	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-26731`	not_vulnerable	2026-06-08 07:53:21.689573	Details available TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`parameter in the formDnsv6 function. Published: 2026-02-17T00:00:00.000Z Updated: 2026-03-16T15:13:25.829Z Open on db.gcve.eu Reference links https://github.com/0xmania/cve/tree/main/TOTOLINK-A3002RU-boa-formDnsv6-StackOverflow	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5508`	not_vulnerable	2026-06-08 07:37:24.982664	TOTOLINK A3002RU IP Port Filtering Page cross site scripting LOW (2.4) A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been rated as problematic. Affected by this issue is some unknown functionality of the component IP Port Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-06-03T16:00:20.117Z Updated: 2025-06-03T17:38:04.291Z Open on db.gcve.eu Reference links https://vuldb.com/?id.310922 https://vuldb.com/?ctiid.310922 https://vuldb.com/?submit.584671 https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/A3002RU_V2/XSS_IP_Port_Filtering https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25499`	not_vulnerable	2026-06-08 05:22:36.777583	Details available TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router. Published: 2020-12-09T20:30:55.000Z Updated: 2024-08-04T15:33:05.689Z Open on db.gcve.eu Reference links https://www.totolink.net/home/index/newsss/id/196.html https://github.com/kdoos/Vulnerabilities/blob/main/RCE_TOTOLINK-A3002RU-V2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.