TOTOLINK

Records1322All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical616CVSS 9.0–10.0

CVSS high434CVSS 7.0–8.9

Exploited now

TOTOLINK records in CISA KEV

No TOTOLINK vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X5000r Firmware 70 records HIGH A3300r Firmware 64 records HIGH A3002r Firmware 61 records HIGH X6000r Firmware 57 records HIGH A3002ru Firmware 49 records HIGH A3100r Firmware 47 records HIGH X2000r Firmware 45 records HIGH A3700r Firmware 43 records CRITICAL

Records

61 records in A3002r Firmware · all components

TI-2025-35057 CVE-2025-55591 · GHSA-c5fc-3737-qpvj

TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection…

HIGH 82

TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07257 Published 2025-08-18 No fix listed CWE-77

TI-2025-28880 CVE-2025-45865 · GHSA-v7m3-xggw-4h6v

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the…

HIGH 82

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00631 Published 2025-05-13 No fix listed CWE-120

TI-2025-28878 CVE-2025-45863 · GHSA-5cw9-h2jj-8927

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the…

HIGH 82

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00632 Published 2025-05-13 No fix listed CWE-120

TI-2025-28876 CVE-2025-45861 · GHSA-cxpp-jwcw-w84c

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the…

HIGH 82

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00631 Published 2025-05-13 No fix listed CWE-120

TI-2025-28874 CVE-2025-45858 · GHSA-c5qx-gcrc-9fpj

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection…

HIGH 82

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1107 Published 2025-05-13 No fix listed CWE-78

TI-2025-19054 CVE-2025-25579 · GHSA-gc26-wqwp-qr8c

TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.

HIGH 82

TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10419 Published 2025-03-28 No fix listed CWE-78

TI-2024-28482 CVE-2024-42520 · GHSA-m373-6rxj-pvqw

TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentControl.

HIGH 82

TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentControl.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00629 Published 2024-08-12 No fix listed CWE-120

TI-2024-22619 CVE-2024-34195 · GHSA-wm63-qmcq-5w39

TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer…

HIGH 76

TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00938 Published 2024-08-28 No fix listed CWE-121

TI-2025-05888 CVE-2025-6487 · GHSA-3mr3-hmmq-cq24

TOTOLINK A3002R formRoute stack-based overflow

HIGH 73

A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01016 Published 2025-06-22 No fix listed CWE-119

TI-2025-05887 CVE-2025-6486 · GHSA-fmh2-32mp-xrcx

TOTOLINK A3002R formWlanMultipleAP stack-based overflow

HIGH 73

A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01016 Published 2025-06-22 No fix listed CWE-119

TI-2025-05794 CVE-2025-6393 · GHSA-6xw8-jh6q-85g8

TOTOLINK A702R/A3002R/A3002RU/EX1200T HTTP POST Request formIPv6Addr buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.1404/4.0.0-B20230721.1521/4.1.2cu.5232_B20210713.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01046 Published 2025-06-21 No fix listed CWE-119

TI-2025-05574 CVE-2025-6164 · GHSA-wmrm-h25f-p3q4

TOTOLINK A3002R HTTP POST Request formMultiAP buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A3002R 4.0.0-B20230531.1404.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00984 Published 2025-06-17 No fix listed CWE-119

TI-2025-05559 CVE-2025-6149 · GHSA-pvf7-6853-rvq4

TOTOLINK A3002R HTTP POST Request formSysLog buffer overflow

HIGH 73

A vulnerability classified as critical has been found in TOTOLINK A3002R 4.0.0-B20230531.1404.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01036 Published 2025-06-17 No fix listed CWE-119

TI-2025-04328 CVE-2025-4833 · GHSA-gx7g-663f-fvr2

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formNtp buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0085 Published 2025-05-17 No fix listed CWE-119

TI-2025-04327 CVE-2025-4832 · GHSA-cq5p-gh3j-rmpx

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDosCfg buffer overflow

HIGH 73

A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0085 Published 2025-05-17 No fix listed CWE-119

TI-2025-04326 CVE-2025-4831 · GHSA-5m7h-3422-q57v

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSiteSurveyProfile buffer overflow

HIGH 73

A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0085 Published 2025-05-17 No fix listed CWE-119

TI-2025-04320 CVE-2025-4825 · GHSA-4cmr-35q3-c969

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDMZ buffer overflow

HIGH 73

A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00849 Published 2025-05-17 No fix listed CWE-119

TI-2025-04319 CVE-2025-4824 · GHSA-3264-h8mv-qcrp

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWsc buffer overflow

HIGH 73

A vulnerability classified as critical has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00849 Published 2025-05-17 No fix listed CWE-119

TI-2025-04318 CVE-2025-4823 · GHSA-vp4m-3qw3-rfpq

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formReflashClientTbl submit-url buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00849 Published 2025-05-17 No fix listed CWE-119

TI-2024-36697 CVE-2024-54907 · GHSA-p5x7-32hj-qcxr

TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc.

HIGH 73

TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0113 Published 2024-12-26 No fix listed CWE-94

TI-2025-05738 CVE-2025-6337 · GHSA-jrvp-6f3w-jhh7

TOTOLINK A3002R/A3002RU HTTP POST Request formTmultiAP buffer overflow

HIGH 71

A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615/4.0.0-B20230531.1404.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00984 Published 2025-06-20 No fix listed CWE-119

TI-2025-35056 CVE-2025-55590 · GHSA-q6fx-83q6-4wcj

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an command injection…

HIGH 70

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an command injection vulnerability via the component bupload.html.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00764 Published 2025-08-18 No fix listed CWE-77

TI-2025-35055 CVE-2025-55589 · GHSA-82q9-wg2w-62m2

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command…

HIGH 70

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at /boafrm/formMapDelDevice.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00986 Published 2025-08-18 No fix listed CWE-78

TI-2025-35051 CVE-2025-55585 · GHSA-992c-c9rw-rh86

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an eval injection vulnerability via the eval() function.

HIGH 70

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an eval injection vulnerability via the eval() function.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00275 Published 2025-08-18 No fix listed CWE-95

TI-2024-22322 CVE-2024-33820 · GHSA-pccf-f85g-p7gq

Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware…

HIGH 68

Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware V4.0.0-B20230531.1404 is vulnerable to Buffer Overflow via the formWlEncrypt function of the boa server.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00554 Published 2024-05-01 No fix listed CWE-120

Open these records in search →

Critical	616
High	434
Medium	263
Low	9
No CVSS	0