Totolink A3002Ru vulnerabilities
27 known vulnerabilities affecting totolink/a3002ru.
Total CVEs
27
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH22MEDIUM5
Vulnerabilities
Page 2 of 2
CVE-2025-4835HIGHCVSS 8.7v3.0.0-B20230809.16152025-05-17
CVE-2025-4835 [HIGH] CWE-119 CVE-2025-4835: A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been de
A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The attack can be launc
cvelistv5nvd
CVE-2025-4832HIGHCVSS 8.7v3.0.0-B20230809.16152025-05-17
CVE-2025-4832 [HIGH] CWE-119 CVE-2025-4832: A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classi
A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit ha
cvelistv5nvd
CVE-2025-4732HIGHCVSS 8.7v3.0.0-B20230809.16152025-05-16
CVE-2025-4732 [HIGH] CWE-119 CVE-2025-4732: A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615
A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to
cvelistv5nvd
CVE-2025-4731HIGHCVSS 8.7v3.0.0-B20230809.16152025-05-16
CVE-2025-4731 [HIGH] CWE-119 CVE-2025-4731: A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809
A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type/ip_subnet leads to buffer overflow. It is possible to initiate the attack remotely. The exploit ha
cvelistv5nvd
CVE-2025-4733HIGHCVSS 8.7v3.0.0-B20230809.16152025-05-16
CVE-2025-4733 [HIGH] CWE-119 CVE-2025-4733: A vulnerability, which was classified as critical, has been found in TOTOLINK A3002R and A3002RU 3.0
A vulnerability, which was classified as critical, has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This issue affects some unknown processing of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The attack may be initiated remotely. The exploit has be
cvelistv5nvd
CVE-2025-4730HIGHCVSS 8.7v3.0.0-B20230809.16152025-05-16
CVE-2025-4730 [HIGH] CWE-119 CVE-2025-4730: A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as
A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer overflow. The attack may be launched remotely. The exploit
cvelistv5nvd
CVE-2025-4729MEDIUMCVSS 5.3v3.0.0-B20230809.16152025-05-16
CVE-2025-4729 [MEDIUM] CWE-74 CVE-2025-4729: A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared
A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMapDelDevice of the component HTTP POST Request Handler. The manipulation of the argument macstr leads to command injection. The attack can be launched remotel
cvelistv5nvd
← Previous2 / 2