A3002ru Firmware (Totolink) - vulnerabilities (CVEs)

50 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2026-02-17. Vendor: Totolink.

CVEs of A3002ru Firmware

CVE-2026-26731 - CVSS 8.8 (high), 2026-02-17: TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`parameter in the formDnsv6 function.
CVE-2026-26736 - CVSS 8.8 (high), 2026-02-17: TOTOLINK A3002RU_V3 V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the static_ipv6 parameter in the formIpv6Setup function.
CVE-2026-26732 - CVSS 8.8 (high), 2026-02-17: TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPassword` parameters in the formFilter…
CVE-2025-6953 - CVSS 8.8 (high), 2025-07-01: A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file…
CVE-2025-6939 - CVSS 8.8 (high), 2025-07-01: A vulnerability classified as critical has been found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file…
CVE-2025-6393 - CVSS 8.8 (high), 2025-06-21: A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T…
CVE-2025-6337 - CVSS 8.8 (high), 2025-06-20: A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615/4.0.0-B20230531.1404. It has been declared as critical. Affected by this…
CVE-2025-6163 - CVSS 8.8 (high), 2025-06-17: A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615 and classified as critical. Affected by this issue is some unknown functionality of the…
CVE-2025-6148 - CVSS 8.8 (high), 2025-06-17: A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. It has been rated as critical. This issue affects some unknown processing of the file…
CVE-2025-5508 - CVSS 4.8 (medium), 2025-06-03: A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been rated as problematic. Affected by this issue is some unknown functionality of…
CVE-2025-5507 - CVSS 5.4 (medium), 2025-06-03: A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been declared as problematic. Affected by this vulnerability is an unknown…
CVE-2025-5506 - CVSS 5.4 (medium), 2025-06-03: A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been classified as problematic. Affected is an unknown function of the component…
CVE-2025-5505 - CVSS 4.8 (medium), 2025-06-03: A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011 and classified as problematic. This issue affects some unknown processing of the file…
CVE-2025-4835 - CVSS 8.8 (high), 2025-05-17: A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an…
CVE-2025-4834 - CVSS 8.8 (high), 2025-05-17: A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been classified as critical. Affected is an unknown function of…
CVE-2025-4833 - CVSS 8.8 (high), 2025-05-17: A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This issue affects some unknown processing of…
CVE-2025-4832 - CVSS 8.8 (high), 2025-05-17: A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This vulnerability affects unknown code…
CVE-2025-4831 - CVSS 8.8 (high), 2025-05-17: A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the…
CVE-2025-4830 - CVSS 8.8 (high), 2025-05-17: A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected by this issue is some…
CVE-2025-4829 - CVSS 8.8 (high), 2025-05-17: A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected by this vulnerability is the function…
CVE-2025-4827 - CVSS 8.8 (high), 2025-05-17: A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of…
CVE-2025-4826 - CVSS 8.8 (high), 2025-05-17: A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This issue affects some unknown…
CVE-2025-4823 - CVSS 8.8 (high), 2025-05-17: A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is the function…
CVE-2025-4825 - CVSS 8.8 (high), 2025-05-17: A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the…
CVE-2025-4824 - CVSS 8.8 (high), 2025-05-17: A vulnerability classified as critical has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file…
CVE-2025-4733 - CVSS 8.8 (high), 2025-05-16: A vulnerability, which was classified as critical, has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This issue affects some unknown…
CVE-2025-4732 - CVSS 8.8 (high), 2025-05-16: A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file…
CVE-2025-4731 - CVSS 8.8 (high), 2025-05-16: A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file…
CVE-2025-4730 - CVSS 8.8 (high), 2025-05-16: A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is some unknown…
CVE-2025-4729 - CVSS 6.3 (medium), 2025-05-16: A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown…
CVE-2024-51228 - CVSS 6.8 (medium), 2024-11-27: An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1420 and…
CVE-2024-34198 - CVSS 9.8 (critical), 2024-08-28: TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow. The formWlEncrypt CGI handler in the boa program fails to…
CVE-2023-48859 - CVSS 8.8 (high), 2023-12-06: TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows attackers to bypass front-end security…
CVE-2022-35491 - CVSS 9.8 (critical), 2022-08-10: TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample.
CVE-2018-13313 - CVSS 6.5 (medium), 2020-02-24: In TOTOLINK A3002RU 1.0.8, the router provides a page that allows the user to change their account name and password. This page, password.htm, contains…
CVE-2019-19822 - CVSS 7.5 (high), 2020-01-27: A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration,…
CVE-2019-19824 - CVSS 8.8 (high), 2020-01-27: On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd…
CVE-2019-19823 - CVSS 7.5 (high), 2020-01-27: A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory…
CVE-2019-19825 - CVSS 9.8 (critical), 2020-01-27: On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI,…
CVE-2018-13314 - CVSS 9.8 (critical), 2018-11-27: System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ipAddr" POST parameter.
CVE-2018-13307 - CVSS 9.8 (critical), 2018-11-27: System command injection in fromNtp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ntpServerIp2" POST parameter.…
CVE-2018-13306 - CVSS 9.8 (critical), 2018-11-27: System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ftpUser" POST parameter.
CVE-2018-13316 - CVSS 9.8 (critical), 2018-11-27: System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "subnet" POST parameter.
CVE-2018-13311 - CVSS 9.8 (critical), 2018-11-26: System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "sambaUser" POST parameter.
CVE-2018-13317 - CVSS 6.1 (medium), 2018-11-26: Password disclosure in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to obtain the plaintext password for the admin user by making a GET…
CVE-2018-13310 - CVSS 6.1 (medium), 2018-11-26: Cross-site scripting in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript via the user's username.
CVE-2018-13315 - CVSS 9.8 (critical), 2018-11-26: Incorrect access control in formPasswordSetup in TOTOLINK A3002RU version 1.0.8 allows attackers to change the admin user's password via an unauthenticated…
CVE-2018-13309 - CVSS 6.1 (medium), 2018-11-26: Cross-site scripting in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript via the user's password.
CVE-2018-13312 - CVSS 6.1 (medium), 2018-11-26: Cross-site scripting in notice_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "Input your notice…
CVE-2018-13308 - CVSS 6.1 (medium), 2018-11-26: Cross-site scripting in notice_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "User phrases…