TOTOLINK A3002R

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.

TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.

TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint.

TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncrypt, there is a lack of length restriction on the wlan_ssid field. This oversight leads to potential buffer overflow under specific circumstances. For instance, by invoking the formWlanRedirect function with specific parameters to alter wlan_idx's value and subsequently invoking the formWlEncrypt function, an attacker can trigger buffer overflow, enabling arbitrary command execution or denial of service attacks.

In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmware.

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa.

TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentControl.

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface.

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface.

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface.

TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router.

TOTOLINK A702R/A3002R/A3002RU/EX1200T HTTP POST Request formIPv6Addr buffer overflow

TOTOLINK A3002R HTTP POST Request formSysLog buffer overflow

TOTOLINK A3002R formWlanMultipleAP stack-based overflow

TOTOLINK A3002R formRoute stack-based overflow

TOTOLINK A3002R/A3002RU HTTP POST Request formTmultiAP buffer overflow

TOTOLINK A3002R HTTP POST Request formMultiAP buffer overflow

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSiteSurveyProfile buffer overflow

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSetLg buffer overflow

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWlanRedirect buffer overflow

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formNtp buffer overflow

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDosCfg buffer overflow

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formReflashClientTbl submit-url buffer overflow

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWsc buffer overflow

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDMZ buffer overflow

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWirelessTbl buffer overflow

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSaveConfig buffer overflow

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formStats sub_40BE30 buffer overflow

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSysCmd buffer overflow

TOTOLINK A3002R/A3002RU HTTP POST Request formIpQoS buffer overflow

TOTOLINK A3002R/A3002RU HTTP POST Request formMapDel buffer overflow

TOTOLINK A3002R/A3002RU HTTP POST Request formPortFw buffer overflow

TOTOLINK A3002R/A3002RU HTTP POST Request formFilter buffer overflow

TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc.

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoe_dns1 parameter in the formIpv6Setup interface of /bin/boa.

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_ipv6 parameter in the formIpv6Setup interface of /bin/boa

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_gw parameter in the formIpv6Setup interface of /bin/boa.

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa.

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa.

Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware V4.0.0-B20230531.1404 is vulnerable to Buffer Overflow via the formWlEncrypt function of the boa server. Specifically, they exploit the length of the wlan_ssid field triggers the overflow.