Total vulnerabilities in the database
A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type/ip_subnet leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
| Software | From | Fixed in |
|---|---|---|
| totolink / a3002r_firmware | 3.0.0-b20230809.1615 | 3.0.0-b20230809.1615.x |
| totolink / a3002ru_firmware | 3.0.0-b20230809.1615 | 3.0.0-b20230809.1615.x |