AF
Product
A3002r Firmware
61
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 33Medium 17Low 1
Watch
Add A3002r Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6487 | 8.8 | Jun 22 | TOTOLINK A3002R formRoute stack-based overflow Affected: 1.1.1-b20200824.0128 |
| CVE-2025-6486 | 8.8 | Jun 22 | TOTOLINK A3002R formWlanMultipleAP stack-based overflow Affected: 1.1.1-b20200824.0128 |
| CVE-2025-6337 | 8.8 | Jun 20 | TOTOLINK A3002R/A3002RU HTTP POST Request formTmultiAP buffer overflow Affected: 4.0.0-b20230531.1404; 3.0.0-b20230809.1615 |
| CVE-2025-6164 | 8.8 | Jun 17 | TOTOLINK A3002R HTTP POST Request formMultiAP buffer overflow Affected: 4.0.0-b20230531.1404 |
| CVE-2025-6149 | 8.8 | Jun 17 | TOTOLINK A3002R HTTP POST Request formSysLog buffer overflow Affected: 4.0.0-b20230531.1404 |
| CVE-2025-4835 | 8.8 | May 17 | TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWlanRedirect buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4834 | 8.8 | May 17 | TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSetLg buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4833 | 8.8 | May 17 | TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formNtp buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4832 | 8.8 | May 17 | TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDosCfg buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4831 | 8.8 | May 17 | TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSiteSurveyProfile buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4830 | 8.8 | May 17 | TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSysCmd buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4829 | 8.8 | May 17 | TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formStats sub_40BE30 buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4827 | 8.8 | May 17 | TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSaveConfig buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4826 | 8.8 | May 17 | TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWirelessTbl buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4825 | 8.8 | May 17 | TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDMZ buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4824 | 8.8 | May 17 | TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWsc buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4823 | 8.8 | May 17 | TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formReflashClientTbl submit-url buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4733 | 8.8 | May 16 | TOTOLINK A3002R/A3002RU HTTP POST Request formIpQoS buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4732 | 8.8 | May 16 | TOTOLINK A3002R/A3002RU HTTP POST Request formFilter buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4731 | 8.8 | May 16 | TOTOLINK A3002R/A3002RU HTTP POST Request formPortFw buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2025-4730 | 8.8 | May 16 | TOTOLINK A3002R/A3002RU HTTP POST Request formMapDel buffer overflow Affected: 3.0.0-b20230809.1615 |
| CVE-2024-54907 | 8.8 | Dec 26 | TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc Affected: 4.0.0-b20230531.1404 |
| CVE-2020-25499 | 8.8 | Dec 9 | TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command' Affected: before 1.1.1-b20200824.0128 |
| CVE-2025-25635 | 8.0 | Feb 28 | TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability Affected: 1.1.1-b20200824.0128 |
| CVE-2025-25610 | 8.0 | Feb 28 | TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability Affected: 1.1.1-b20200824.0128 |
| CVE-2025-25609 | 8.0 | Feb 28 | TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability Affected: 1.1.1-b20200824.0128 |
| CVE-2025-55586 | 7.5 | Aug 18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the url parameter at /boafrm/formFilter Affected: 4.0.0-b20230531.1404 |
| CVE-2025-55588 | 7.5 | Aug 18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the fw_ip parameter at /boafrm/formPortFw Affected: 4.0.0-b20230531.1404 |
| CVE-2025-55587 | 7.5 | Aug 18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the hostname parameter at /boafrm/formMapDelDevice Affected: 4.0.0-b20230531.1404 |
| CVE-2025-6393 | 7.5 | Jun 21 | TOTOLINK A702R/A3002R/A3002RU/EX1200T HTTP POST Request formIPv6Addr buffer overflow Affected: 4.0.0-b20230531.1404 |
| CVE-2024-33820 | 7.5 | May 1 | Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware V4.0.0-B20230531.1404 is vulnerable to Buffer Overflow via the formWlEncrypt function of the boa server Affected: 4.0.0-b20230531.1404 |
| CVE-2022-40112 | 7.5 | Sep 6 | TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa Affected: 1.1.1-b20200824.0128 |
| CVE-2022-40110 | 7.5 | Sep 6 | TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa Affected: 1.1.1-b20200824.0128 |
Showing 33
