Login Request a demo
AF
Product
A3002r Firmware
by Totolink · last CVE Aug 18, 2025
61
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities61In the news0Timeline
Severity mix
Critical 10High 33Medium 17Low 1
Severity
All severities61Critical10High33Medium17Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add A3002r Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-55585
6.5
0%
Aug 18
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an eval injection vulnerability via the eval() function
Affected: 4.0.0-b20230531.1404
CVE-2025-55590
6.5
1%
Aug 18
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an command injection vulnerability via the component bupload.html
Affected: 4.0.0-b20230531.1404
CVE-2025-55589
6.5
1%
Aug 18
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at…
Affected: 4.0.0-b20230531.1404
CVE-2025-45862
6.5
0%
May 20
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the interfacenameds parameter in the formDhcpv6s interface
Affected: 4.0.0-b20230531.1404
CVE-2025-6485
6.3
9%
Jun 22
A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128
Affected: 1.1.1-b20200824.0128
CVE-2025-4729
6.3
1%
May 16
A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615
Affected: 3.0.0-b20230809.1615
CVE-2021-34228
6.1
29%
Aug 20
Cross-site scripting in parent_control.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the…
Affected: 1.1.1-b20200824
CVE-2021-34223
6.1
1%
Aug 20
Cross-site scripting in urlfilter.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the "URL…
Affected: 1.1.1-b20200824
CVE-2021-34220
6.1
1%
Aug 20
Cross-site scripting in tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the…
Affected: 1.1.1-b20200824
CVE-2021-34215
6.1
1%
Aug 20
Cross-site scripting in tcpipwan.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the…
Affected: 1.1.1-b20200824
CVE-2021-34207
6.1
1%
Aug 20
Cross-site scripting in ddns.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the "Domain…
Affected: 1.1.1-b20200824
CVE-2025-45867
5.4
5%
May 13
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the static_dns1 parameter in the formIpv6Setup interface
Affected: 4.0.0-b20230531.1404
CVE-2025-45866
5.4
0%
May 13
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s interface
Affected: 4.0.0-b20230531.1404
CVE-2025-45864
5.4
5%
May 13
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface
Affected: 4.0.0-b20230531.1404
CVE-2025-45859
5.4
5%
May 13
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interface
Affected: 4.0.0-b20230531.1404
CVE-2025-55584
5.3
0%
Aug 18
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain insecure credentials for the telnet service and root account
Affected: 4.0.0-b20230531.1404
CVE-2021-34218
5.3
1%
Aug 20
Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /add/ , /img/, /js/, and /mobile directories via GET Parameter
Affected: 1.1.1-b20200824
Showing 17