EUVD-2026-83583
GHSA-v5hr-562w-3384
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable low-complexity command injection needing low-privilege router auth (PR:L); full device OS command execution gives C:H/I:H/A:H with scope unchanged since code runs on the router itself.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
7DescriptionCVE.org
A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of the file /boafrm/formWsc. This manipulation of the argument localPin causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
AnalysisAI
OS command injection in the Totolink A3002MU router firmware (build Hh-B20211125.1046) lets a remote attacker who holds valid low-privilege credentials execute arbitrary shell commands on the device through the formWsc handler in /boafrm/formWsc by supplying a crafted localPin argument. Because the affected component is the router's BOA web management service, successful exploitation yields full compromise of confidentiality, integrity and availability (CVSS 4.0 score 8.6, PR:L, no user interaction), and on consumer routers the required low-privilege session is often trivially satisfied by unchanged default administrative credentials. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires network reachability to the router's HTTP management service (/boafrm/ boa web server) and low-privilege authentication (CVSS PR:L) - the attacker needs a valid session or credentials, which on consumer routers is frequently satisfied by unchanged default logins. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N, VC:H/VI:H/VA:H) describes a network-reachable, low-complexity command-injection flaw requiring only low-privilege authentication and no user interaction, yielding full confidentiality/integrity/availability impact - consistent with OS command execution on an embedded router. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch for the Totolink A3002MU build Hh-B20211125.1046 has been identified at the time of analysis, so administrators should first check the Totolink support site (https://www.totolink.net/) and the VulDB entry (https://vuldb.com/vuln/407552) for a firmware update and apply it as soon as one is published. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Totolink A3002MU units running firmware Hh-B20211125.1046, immediately remove them from internet-facing or remote-access roles, disable WAN-side and remote management of the BOA web interface, change all default administrative credentials to strong unique values, and restrict management access to trusted internal segments only. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Stack-based buffer overflow in the TOTOLINK A3002MU router's QoS Rule Handler allows remote attackers to corrupt memory
Improper authorization in the boa web server on TOTOLINK A3002MU firmware 1.0.0-B20230403.1455 lets remote, unauthentica
A stack-based buffer overflow in the TOTOLINK A3002MU wireless router (firmware Hh-B20211125.1046) allows remote attacke
Buffer overflow in the TOTOLINK A3002MU router (firmware Hh-B20211125.1046) lets remote attackers corrupt memory by send
Buffer overflow in TOTOLINK A3002MU router firmware version Hh-B20211125.1046 allows authenticated remote attackers to c
Authenticated buffer overflow in the web management interface of the TOTOLINK A3002MU router (firmware build Hh-B2021112
A buffer overflow in TOTOLINK A3002MU routers running firmware Hh-B20211125.1046 lets an authenticated remote attacker c
Stack-based buffer overflow in the Totolink A3002MU router's boa HTTP server allows a network-adjacent authenticated att
Stack-based buffer overflow in Totolink A3002MU router firmware B20211125.1046 allows authenticated remote attackers to
Path traversal in the Totolink A3002MU router's File Upload Handler (firmware 1.0.0-B20230403.1455) allows remote unauth
Cross-site scripting in the Anchor Tag Handler of Totolink A3002MU firmware version Hh-B20211125.1046 allows network-acc
Same weakness CWE-77 – Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today