AF
Product
A3002ru Firmware
by Totolink · last CVE Feb 17, 2026
50
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 29Medium 10Low 2
Watch

Add A3002ru Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-51228
6.8
4%
Nov 27
An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1420 and TOTOLINK-CX-N300RT…
Affected: 1.0.4-B20171106.1512
CVE-2018-13313
6.5
1%
Feb 24
Admin Password returned in password.htm
Affected: 1.0.8
CVE-2025-4729
6.3
1%
May 15
TOTOLINK A3002R/A3002RU HTTP POST Request formMapDelDevice command injection
Affected: 3.0.0-b20230809.1615
CVE-2018-13308
6.1
1%
Nov 26
Cross-site scripting in notice_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "User phrases button" field
Affected: 1.0.8
CVE-2018-13317
6.1
1%
Nov 26
Password disclosure in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to obtain the plaintext password for the admin user by making a GET request for password.htm
Affected: 1.0.8
CVE-2018-13312
6.1
1%
Nov 26
Cross-site scripting in notice_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "Input your notice URL" field
Affected: 1.0.8
CVE-2018-13310
6.1
1%
Nov 26
Cross-site scripting in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript via the user's username
Affected: 1.0.8
CVE-2018-13309
6.1
1%
Nov 26
Cross-site scripting in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript via the user's password
Affected: 1.0.8
CVE-2025-5507
5.4
0%
Jun 3
TOTOLINK A3002RU MAC Filtering Page cross site scripting
Affected: 2.1.1-b20230720.1011
CVE-2025-5506
5.4
0%
Jun 3
TOTOLINK A3002RU NAT Mapping Page cross site scripting
Affected: 2.1.1-b20230720.1011
Showing 10