Priority HIGH 82
TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07257 · Published 2025-08-18 · No fix listed CWE-77
Priority HIGH 70
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an command injection vulnerability via the component bupload.html.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00764 · Published 2025-08-18 · No fix listed CWE-77
Priority HIGH 70
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at /boafrm/formMapDelDevice.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00986 · Published 2025-08-18 · No fix listed CWE-78
Priority HIGH 66
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the fw_ip parameter at /boafrm/formPortFw.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00433 · Published 2025-08-18 · No fix listed CWE-400
Priority HIGH 66
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the hostname parameter at /boafrm/formMapDelDevice.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00433 · Published 2025-08-18 · No fix listed CWE-400
Priority HIGH 66
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the url parameter at /boafrm/formFilter.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00433 · Published 2025-08-18 · No fix listed CWE-400
Priority HIGH 70
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an eval injection vulnerability via the eval() function.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00275 · Published 2025-08-18 · No fix listed CWE-95
Priority MEDIUM 57
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain insecure credentials for the telnet service and root account.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00313 · Published 2025-08-18 · No fix listed CWE-1391
Priority HIGH 73
A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01016 · Published 2025-06-22 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01016 · Published 2025-06-22 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.09338 · Published 2025-06-22 · No fix listed CWE-77
Priority HIGH 73
A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.1404/4.0.0-B20230721.1521/4.1.2cu.5232_B20210713.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01046 · Published 2025-06-21 · No fix listed CWE-119
Priority HIGH 71
A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615/4.0.0-B20230531.1404.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00984 · Published 2025-06-20 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in TOTOLINK A3002R 4.0.0-B20230531.1404.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00984 · Published 2025-06-17 · No fix listed CWE-119
Priority HIGH 73
A vulnerability classified as critical has been found in TOTOLINK A3002R 4.0.0-B20230531.1404.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01036 · Published 2025-06-17 · No fix listed CWE-119
Priority MEDIUM 62
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the interfacenameds parameter in the formDhcpv6s interface.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00339 · Published 2025-05-20 · No fix listed CWE-121
Priority MEDIUM 55
A vulnerability, which was classified as problematic, has been found in TOTOLINK A3002R 2.1.1-B20230720.1011.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00421 · Published 2025-05-18 · No fix listed CWE-79
Priority MEDIUM 41
A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.0085 · Published 2025-05-17 · No fix listed CWE-119
Priority MEDIUM 41
A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.0085 · Published 2025-05-17 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.0085 · Published 2025-05-17 · No fix listed CWE-119
Priority HIGH 73
A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.0085 · Published 2025-05-17 · No fix listed CWE-119
Priority HIGH 73
A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.0085 · Published 2025-05-17 · No fix listed CWE-119
Priority MEDIUM 41
A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00849 · Published 2025-05-17 · No fix listed CWE-119
Priority MEDIUM 41
A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00849 · Published 2025-05-17 · No fix listed CWE-119
Priority MEDIUM 41
A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00849 · Published 2025-05-17 · No fix listed CWE-119
Load more
THREATIST.IORead the docs