TOTOLINK A3002R Firmware 1.1.1-b20200824.0128
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:a3002r_firmware:1.1.1-b20200824.0128:*:*:*:*:*:*:*
part: o version: 1.1.1-b20200824.0128 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | A3002R Firmware (60148191-7756-532d-9168-88651bbe56db) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-6487 |
vulnerable | 2026-06-08 07:43:15.144800 |
TOTOLINK A3002R formRoute stack-based overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been rated as critical. This issue affects the function formRoute of the file /boafrm/formRoute. The manipulation of the argument subnet leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-22T18:00:15.051Z
Updated: 2025-06-23T16:50:06.003Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6486 |
vulnerable | 2026-06-08 07:43:15.144271 |
TOTOLINK A3002R formWlanMultipleAP stack-based overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been declared as critical. This vulnerability affects the function formWlanMultipleAP of the file /boafrm/formWlanMultipleAP. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-22T17:31:07.185Z
Updated: 2025-06-23T16:51:47.706Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6485 |
vulnerable | 2026-06-08 07:43:15.143675 |
TOTOLINK A3002R formWlSiteSurvey os command injection
MEDIUM (6.3)
A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been classified as critical. This affects the function formWlSiteSurvey of the file /boafrm/formWlSiteSurvey. The manipulation of the argument wlanif leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-22T17:00:16.977Z
Updated: 2025-06-23T13:28:25.470Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25635 |
vulnerable | 2026-06-08 07:12:51.268624 |
Details available
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoe_dns1 parameter in the formIpv6Setup interface of /bin/boa.
Published: 2025-02-28T00:00:00.000Z
Updated: 2025-09-02T15:55:23.241Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25610 |
vulnerable | 2026-06-08 07:12:51.254192 |
Details available
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_gw parameter in the formIpv6Setup interface of /bin/boa.
Published: 2025-02-28T00:00:00.000Z
Updated: 2025-03-05T15:43:58.613Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25609 |
vulnerable | 2026-06-08 07:12:51.253687 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40112 |
vulnerable | 2026-06-08 05:48:22.896913 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40111 |
vulnerable | 2026-06-08 05:48:22.896531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40110 |
vulnerable | 2026-06-08 05:48:22.896010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40109 |
vulnerable | 2026-06-08 05:48:22.894444 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.