CVE-2025-4732
- EPSS 0.22%
- Published 16.05.2025 00:31:06
- Last modified 20.06.2025 14:09:31
A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ...
- EPSS 0.22%
- Published 16.05.2025 00:00:10
- Last modified 20.06.2025 14:09:44
A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument servic...
CVE-2025-4730
- EPSS 0.22%
- Published 16.05.2025 00:00:07
- Last modified 20.06.2025 14:09:52
A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipula...
CVE-2025-4729
- EPSS 2.58%
- Published 15.05.2025 23:31:06
- Last modified 20.06.2025 14:10:00
A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMapDelDevice of the component HTTP POST Request Handle...
CVE-2025-45863
- EPSS 0.11%
- Published 13.05.2025 00:00:00
- Last modified 23.05.2025 18:55:24
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface.
CVE-2025-45859
- EPSS 0.06%
- Published 13.05.2025 00:00:00
- Last modified 16.06.2025 18:25:52
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interface.
CVE-2025-45864
- EPSS 0.06%
- Published 13.05.2025 00:00:00
- Last modified 17.06.2025 19:41:20
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface.
CVE-2025-45866
- EPSS 0.03%
- Published 13.05.2025 00:00:00
- Last modified 17.06.2025 19:39:56
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s interface.
CVE-2025-45867
- EPSS 0.06%
- Published 13.05.2025 00:00:00
- Last modified 17.06.2025 19:39:47
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the static_dns1 parameter in the formIpv6Setup interface.
CVE-2025-45858
- EPSS 9.76%
- Published 13.05.2025 00:00:00
- Last modified 23.05.2025 18:57:36
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.