Login Request a demo
AF
Product
A3002ru Firmware
by Totolink · last CVE Feb 17, 2026
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities49In the news0Timeline
Severity mix
Critical 9High 29Medium 9Low 2
Severity
All severities49Critical9High29Medium9Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add A3002ru Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-13313
6.5
1%
Feb 24
In TOTOLINK A3002RU 1.0.8, the router provides a page that allows the user to change their account name and password
Affected: 1.0.8
CVE-2025-4729
6.3
1%
May 16
A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615
Affected: 3.0.0-b20230809.1615
CVE-2018-13317
6.1
1%
Nov 26
Password disclosure in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to obtain the plaintext password for the admin user by making a GET request for password.htm
Affected: 1.0.8
CVE-2018-13312
6.1
1%
Nov 26
Cross-site scripting in notice_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "Input your notice URL" field
Affected: 1.0.8
CVE-2018-13310
6.1
1%
Nov 26
Cross-site scripting in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript via the user's username
Affected: 1.0.8
CVE-2018-13309
6.1
1%
Nov 26
Cross-site scripting in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript via the user's password
Affected: 1.0.8
CVE-2018-13308
6.1
1%
Nov 26
Cross-site scripting in notice_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "User phrases button" field
Affected: 1.0.8
CVE-2025-5507
5.4
0%
Jun 3
A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011
Affected: 2.1.1-b20230720.1011
CVE-2025-5506
5.4
0%
Jun 3
A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011
Affected: 2.1.1-b20230720.1011
Showing 9