[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4qOT6KOv5HH_ngXWOjcinvdId0yNDYA7LjkO8vV_dOg":3,"g5a-ex:totolink\u002Fa3002r@*":101,"g5a-family:totolink\u002Fa3002r":103},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":78,"seoMetadata":79,"meta":98},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"totolink","a3002r",1,47,0,"2025-08-18",[14],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"v4",false,"A3002r by Totolink is a technology product with 1 tracked version and 47 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},[21,29,36,41,45,51,58,63,68,73],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":28},"CVE-2021-34228","Cross-site scripting in parent_control.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the \"Description\" field and \"Service Name\" field.","2021-08-20",6.1,"v3.1","Medium",0.29161,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":26,"severity":34,"isKev":16,"epssScore":35},"CVE-2025-25579","TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in \u002Fbin\u002Fboa via bandstr.","2025-03-28",9.8,"Critical",0.10079,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":33,"cvssVersion":26,"severity":34,"isKev":16,"epssScore":40},"CVE-2025-45858","TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.","2025-05-13",0.09139,{"cveId":42,"description":43,"publishedDate":12,"cvssScore":33,"cvssVersion":26,"severity":34,"isKev":16,"epssScore":44},"CVE-2025-55591","TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint.",0.07243,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":50},"CVE-2025-6485","A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been classified as critical. This affects the function formWlSiteSurvey of the file \u002Fboafrm\u002FformWlSiteSurvey. The manipulation of the argument wlanif leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.","2025-06-22",6.3,0.05956,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":26,"severity":56,"isKev":16,"epssScore":57},"CVE-2020-25499","TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router.","2020-12-09",8.8,"High",0.04232,{"cveId":59,"description":60,"publishedDate":39,"cvssScore":61,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":62},"CVE-2025-45859","TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interface.",5.4,0.03503,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":55,"cvssVersion":26,"severity":56,"isKev":16,"epssScore":67},"CVE-2024-54907","TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in \u002Fbin\u002Fboa via formWsc.","2024-12-26",0.01138,{"cveId":69,"description":70,"publishedDate":12,"cvssScore":71,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":72},"CVE-2025-55589","TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at \u002Fboafrm\u002FformMapDelDevice.",6.5,0.01055,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":33,"cvssVersion":26,"severity":34,"isKev":16,"epssScore":77},"CVE-2024-34195","TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncrypt, there is a lack of length restriction on the wlan_ssid field. This oversight leads to potential buffer overflow under specific circumstances. For instance, by invoking the formWlanRedirect function with specific parameters to alter wlan_idx's value and subsequently invoking the formWlEncrypt function, an attacker can trigger buffer overflow, enabling arbitrary command execution or denial of service attacks.","2024-08-28",0.00938,[],{"title":80,"metaDescription":81,"keywords":82,"structuredData":83},"A3002r by Totolink - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for A3002r by Totolink covering 1 version with 47 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","A3002r vulnerabilities, A3002r security, A3002r CVE, Totolink A3002r, A3002r threat intelligence, Totolink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":84,"@type":85,"name":86,"description":81,"url":87,"manufacturer":88,"applicationCategory":92,"softwareVersion":93,"mainEntity":94},"https:\u002F\u002Fschema.org","SoftwareApplication","A3002r","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftotolink\u002Fa3002r",{"@type":89,"name":90,"url":91},"Organization","Totolink","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Ftotolink","Security Software","1 versions tracked",{"@type":95,"name":96,"description":97,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","A3002r Security Vulnerabilities","Security vulnerabilities affecting A3002r by Totolink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":99,"apiVersion":100},"2026-10-28T21:38:15.538Z","3.0",{"rows":102,"total":11,"capped":16,"failed":11},[],[104],{"product":105,"cves":10},"a3002r_firmware"]