[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4qOT6KOv5HH_ngXWOjcinvdId0yNDYA7LjkO8vV_dOg":3,"g5a-ex:totolink\u002Fa3002r@*":101,"g5a-family:totolink\u002Fa3002r":103},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":78,"seoMetadata":79,"meta":98},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"totolink","a3002r",1,47,0,"2025-08-18",[14],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"v4",false,"A3002r by Totolink is a technology product with 1 tracked version and 47 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},[21,29,36,41,47,51,56,63,68,73],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":28},"CVE-2021-34228","Cross-site scripting in parent_control.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the \"Description\" field and \"Service Name\" field.","2021-08-20",6.1,"v3.1","Medium",0.29161,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":26,"severity":34,"isKev":16,"epssScore":35},"CVE-2025-45858","TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.","2025-05-13",9.8,"Critical",0.10973,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":33,"cvssVersion":26,"severity":34,"isKev":16,"epssScore":40},"CVE-2025-25579","TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in \u002Fbin\u002Fboa via bandstr.","2025-03-28",0.10419,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":46},"CVE-2025-6485","A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been classified as critical. This affects the function formWlSiteSurvey of the file \u002Fboafrm\u002FformWlSiteSurvey. The manipulation of the argument wlanif leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.","2025-06-22",6.3,0.09122,{"cveId":48,"description":49,"publishedDate":12,"cvssScore":33,"cvssVersion":26,"severity":34,"isKev":16,"epssScore":50},"CVE-2025-55591","TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint.",0.076,{"cveId":52,"description":53,"publishedDate":32,"cvssScore":54,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":55},"CVE-2025-45859","TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interface.",5.4,0.05211,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":26,"severity":61,"isKev":16,"epssScore":62},"CVE-2020-25499","TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router.","2020-12-09",8.8,"High",0.04203,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":60,"cvssVersion":26,"severity":61,"isKev":16,"epssScore":67},"CVE-2024-54907","TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in \u002Fbin\u002Fboa via formWsc.","2024-12-26",0.0113,{"cveId":69,"description":70,"publishedDate":12,"cvssScore":71,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":72},"CVE-2025-55589","TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at \u002Fboafrm\u002FformMapDelDevice.",6.5,0.01055,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":60,"cvssVersion":26,"severity":61,"isKev":16,"epssScore":77},"CVE-2025-6337","A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615\u002F4.0.0-B20230531.1404. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file \u002Fboafrm\u002FformTmultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.","2025-06-20",0.0096,[],{"title":80,"metaDescription":81,"keywords":82,"structuredData":83},"A3002r by Totolink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for A3002r by Totolink covering 1 version with 47 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","A3002r vulnerabilities, A3002r security, A3002r CVE, Totolink A3002r, A3002r threat intelligence, Totolink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":84,"@type":85,"name":86,"description":81,"url":87,"manufacturer":88,"applicationCategory":92,"softwareVersion":93,"mainEntity":94},"https:\u002F\u002Fschema.org","SoftwareApplication","A3002r","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftotolink\u002Fa3002r",{"@type":89,"name":90,"url":91},"Organization","Totolink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftotolink","Security Software","1 versions tracked",{"@type":95,"name":96,"description":97,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","A3002r Security Vulnerabilities","Security vulnerabilities affecting A3002r by Totolink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":99,"apiVersion":100},"2026-10-18T14:17:44.501Z","3.0",{"rows":102,"total":11,"capped":16,"failed":11},[],[104],{"product":105,"cves":10},"a3002r_firmware"]