A3002r Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

AF

Product

A3002r Firmware

by Totolink · last CVE Aug 18, 2025

61

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities61 In the news0 Timeline

Severity mix

Critical 10High 33Medium 17Low 1

Severity

All severities61 Critical10 High33 Medium17 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add A3002r Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-34223	6.1	1%	Aug 20	Cross-site scripting in urlfilter.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the "URL… Affected: 1.1.1-b20200824
CVE-2021-34220	6.1	1%	Aug 20	Cross-site scripting in tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the… Affected: 1.1.1-b20200824
CVE-2021-34215	6.1	1%	Aug 20	Cross-site scripting in tcpipwan.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the… Affected: 1.1.1-b20200824
CVE-2021-34207	6.1	1%	Aug 20	Cross-site scripting in ddns.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the "Domain… Affected: 1.1.1-b20200824
CVE-2025-45867	5.4	5%	May 13	TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the static_dns1 parameter in the formIpv6Setup interface Affected: 4.0.0-b20230531.1404
CVE-2025-45866	5.4	0%	May 13	TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s interface Affected: 4.0.0-b20230531.1404
CVE-2025-45864	5.4	5%	May 13	TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface Affected: 4.0.0-b20230531.1404
CVE-2025-45859	5.4	5%	May 13	TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interface Affected: 4.0.0-b20230531.1404
CVE-2025-55584	5.3	0%	Aug 18	TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain insecure credentials for the telnet service and root account Affected: 4.0.0-b20230531.1404
CVE-2021-34218	5.3	1%	Aug 20	Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /add/ , /img/, /js/, and /mobile directories via GET Parameter Affected: 1.1.1-b20200824
CVE-2025-4852	3.4	0%	May 18	A vulnerability, which was classified as problematic, has been found in TOTOLINK A3002R 2.1.1-B20230720.1011 Affected: 2.1.1-b20230720.1011