Login Request a demo
AF
Product
A3002ru Firmware
by Totolink · last CVE Feb 17, 2026
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities49In the news0Timeline
Severity mix
Critical 9High 29Medium 9Low 2
Severity
All severities49Critical9High29Medium9Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add A3002ru Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-34198
9.8
1%
Aug 28
TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow
Affected: 2.1.1-b20230720.1011
CVE-2022-35491
9.8
1%
Aug 9
TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample
Affected: 3.0.0-b20220304.1804
CVE-2019-19825
9.8
30%
Jan 27
On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA…
Affected: through 2.0.0
CVE-2018-13316
9.8
3%
Nov 27
System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "subnet" POST parameter
Affected: 1.0.8
CVE-2018-13314
9.8
3%
Nov 27
System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ipAddr" POST parameter
Affected: 1.0.8
CVE-2018-13307
9.8
3%
Nov 27
System command injection in fromNtp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ntpServerIp2" POST parameter
Affected: 1.0.8
CVE-2018-13306
9.8
3%
Nov 27
System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ftpUser" POST parameter
Affected: 1.0.8
CVE-2018-13315
9.8
2%
Nov 26
Incorrect access control in formPasswordSetup in TOTOLINK A3002RU version 1.0.8 allows attackers to change the admin user's password via an unauthenticated POST request
Affected: 1.0.8
CVE-2018-13311
9.8
2%
Nov 26
System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "sambaUser" POST parameter
Affected: 1.0.8
Showing 9