AF
Product
A3002r Firmware
61
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 33Medium 17Low 1
Watch
Add A3002r Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-55591 | 9.8 | Aug 18 | TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint Affected: 4.0.0-b20230531.1404 |
| CVE-2025-45858 | 9.8 | May 13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function Affected: 4.0.0-b20230531.1404 |
| CVE-2025-45863 | 9.8 | May 13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface Affected: 4.0.0-b20230531.1404 |
| CVE-2025-45865 | 9.8 | May 13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface Affected: 4.0.0-b20230531.1404 |
| CVE-2025-45861 | 9.8 | May 13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface Affected: 4.0.0-b20230531.1404 |
| CVE-2025-25579 | 9.8 | Mar 28 | TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr Affected: 4.0.0-b20230531.1404 |
| CVE-2024-34195 | 9.8 | Aug 28 | TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow Affected: 1.1.1-b20200824 |
| CVE-2024-42520 | 9.8 | Aug 12 | TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentControl Affected: 4.0.0-b20230531.1404 |
| CVE-2022-40111 | 9.8 | Sep 6 | In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmware Affected: 1.1.1-b20200824.0128 |
| CVE-2022-40109 | 9.8 | Sep 6 | TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa Affected: 1.1.1-b20200824.0128 |
Showing 10
