AF
Product
A3002r Firmware
61
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 33Medium 17Low 1
Watch
Add A3002r Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-55591 | 9.8 | Aug 18 | TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint Affected: 4.0.0-b20230531.1404 |
| CVE-2025-45863 | 9.8 | May 13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface Affected: 4.0.0-b20230531.1404 |
| CVE-2025-45865 | 9.8 | May 13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface Affected: 4.0.0-b20230531.1404 |
| CVE-2025-45861 | 9.8 | May 13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface Affected: 4.0.0-b20230531.1404 |
| CVE-2025-45858 | 9.8 | May 13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function Affected: 4.0.0-b20230531.1404 |
| CVE-2025-25579 | 9.8 | Mar 28 | TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr Affected: 4.0.0-b20230531.1404 |
| CVE-2024-34195 | 9.8 | Aug 28 | TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow Affected: 1.1.1-b20200824 |
| CVE-2024-42520 | 9.8 | Aug 12 | TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentControl Affected: 4.0.0-b20230531.1404 |
| CVE-2022-40111 | 9.8 | Sep 6 | In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmware Affected: 1.1.1-b20200824.0128 |
| CVE-2022-40109 | 9.8 | Sep 6 | TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa Affected: 1.1.1-b20200824.0128 |
| CVE-2025-6487 | 8.8 | Jun 22 | A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128 Affected: 1.1.1-b20200824.0128 |
| CVE-2025-6486 | 8.8 | Jun 22 | A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128 Affected: 1.1.1-b20200824.0128 |
| CVE-2025-6337 | 8.8 | Jun 20 | A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615/4.0.0-B20230531.1404 Affected: 4.0.0-b20230531.1404; 3.0.0-b20230809.1615 |
| CVE-2025-6164 | 8.8 | Jun 17 | A vulnerability was found in TOTOLINK A3002R 4.0.0-B20230531.1404 Affected: 4.0.0-b20230531.1404 |
| CVE-2025-6149 | 8.8 | Jun 17 | A vulnerability classified as critical has been found in TOTOLINK A3002R 4.0.0-B20230531.1404 Affected: 4.0.0-b20230531.1404 |
| CVE-2025-4835 | 8.8 | May 17 | A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4834 | 8.8 | May 17 | A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4833 | 8.8 | May 17 | A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4832 | 8.8 | May 17 | A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4831 | 8.8 | May 17 | A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4830 | 8.8 | May 17 | A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4829 | 8.8 | May 17 | A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4827 | 8.8 | May 17 | A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4826 | 8.8 | May 17 | A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4825 | 8.8 | May 17 | A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4824 | 8.8 | May 17 | A vulnerability classified as critical has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4823 | 8.8 | May 17 | A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4733 | 8.8 | May 16 | A vulnerability, which was classified as critical, has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4732 | 8.8 | May 16 | A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4731 | 8.8 | May 16 | A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4730 | 8.8 | May 16 | A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2024-54907 | 8.8 | Dec 26 | TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc Affected: 4.0.0-b20230531.1404 |
| CVE-2020-25499 | 8.8 | Dec 9 | TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command' Affected: before 1.1.1-b20200824.0128 |
| CVE-2025-25635 | 8.0 | Feb 28 | TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability Affected: 1.1.1-b20200824.0128 |
| CVE-2025-25610 | 8.0 | Feb 28 | TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability Affected: 1.1.1-b20200824.0128 |
| CVE-2025-25609 | 8.0 | Feb 28 | TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability Affected: 1.1.1-b20200824.0128 |
| CVE-2025-55588 | 7.5 | Aug 18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the fw_ip parameter at /boafrm/formPortFw Affected: 4.0.0-b20230531.1404 |
| CVE-2025-55587 | 7.5 | Aug 18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the hostname parameter at /boafrm/formMapDelDevice Affected: 4.0.0-b20230531.1404 |
| CVE-2025-55586 | 7.5 | Aug 18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the url parameter at /boafrm/formFilter Affected: 4.0.0-b20230531.1404 |
| CVE-2025-6393 | 7.5 | Jun 21 | A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.1404/4.0.0-B20230721.1521/4.1.2cu.5232_B20210713 Affected: 4.0.0-b20230531.1404 |
| CVE-2024-33820 | 7.5 | May 1 | Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware V4.0.0-B20230531.1404 is vulnerable to Buffer Overflow via the formWlEncrypt function of the boa server Affected: 4.0.0-b20230531.1404 |
| CVE-2022-40112 | 7.5 | Sep 6 | TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa Affected: 1.1.1-b20200824.0128 |
| CVE-2022-40110 | 7.5 | Sep 6 | TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa Affected: 1.1.1-b20200824.0128 |
| CVE-2025-55590 | 6.5 | Aug 18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an command injection vulnerability via the component bupload.html Affected: 4.0.0-b20230531.1404 |
| CVE-2025-55589 | 6.5 | Aug 18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at… Affected: 4.0.0-b20230531.1404 |
| CVE-2025-55585 | 6.5 | Aug 18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an eval injection vulnerability via the eval() function Affected: 4.0.0-b20230531.1404 |
| CVE-2025-45862 | 6.5 | May 20 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the interfacenameds parameter in the formDhcpv6s interface Affected: 4.0.0-b20230531.1404 |
| CVE-2025-6485 | 6.3 | Jun 22 | A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128 Affected: 1.1.1-b20200824.0128 |
| CVE-2025-4729 | 6.3 | May 16 | A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615 Affected: 3.0.0-b20230809.1615 |
| CVE-2021-34228 | 6.1 | Aug 20 | Cross-site scripting in parent_control.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the… Affected: 1.1.1-b20200824 |