EUVD-2026-92331
GHSA-pjpq-5r9w-r525
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network-reachable authorization bypass (AV:N/AC:L/PR:N/UI:N) yielding full administrative control of the router, so C/I/A all High; scope unchanged as the router itself is the vulnerable component.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
4DescriptionCVE.org
A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
AnalysisAI
Improper authorization in the boa web server on TOTOLINK A3002MU firmware 1.0.0-B20230403.1455 lets remote, unauthenticated attackers reach protected administrative functionality without a valid session, giving them full control over the device's web management interface (high confidentiality, integrity and availability impact). Publicly available exploit code exists against the authentication-check function sub_40FCFC in /bin/boa, so weaponisation effort is low, although no CISA KEV listing or other confirmation of active exploitation was present in the available intelligence at time of analysis. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to the device's boa HTTP management service, which processes the vulnerable authentication-check function sub_40FCFC; no credentials, no user interaction and no special configuration are needed (AV:N/AC:L/PR:N/UI:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Multiple signals align toward genuine priority for exposed devices, though with an important caveat on breadth. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch or fixed firmware version was identified in the available intelligence at time of analysis, so administrators should treat any internet-exposed A3002MU running 1.0.0-B20230403.1455 as compromised-capable and prioritise containment while checking https://www.totolink.net/ and the VulDB advisory at https://vuldb.com/vuln/413465 for a firmware update. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory every TOTOLINK A3002MU running firmware 1.0.0-B20230403.1455, disable WAN-side and remote administration on all of them, and block inbound access to the device management interface at the perimeter firewall or upstream CPE; where remote administration is business-critical, isolate those units on a dedicated network segment with strict source allow-listing and rotate all administrative credentials away from defaults. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Stack-based buffer overflow in the TOTOLINK A3002MU router's QoS Rule Handler allows remote attackers to corrupt memory
A stack-based buffer overflow in the TOTOLINK A3002MU wireless router (firmware Hh-B20211125.1046) allows remote attacke
Buffer overflow in the TOTOLINK A3002MU router (firmware Hh-B20211125.1046) lets remote attackers corrupt memory by send
OS command injection in the Totolink A3002MU router firmware (build Hh-B20211125.1046) lets a remote attacker who holds
Buffer overflow in TOTOLINK A3002MU router firmware version Hh-B20211125.1046 allows authenticated remote attackers to c
Authenticated buffer overflow in the web management interface of the TOTOLINK A3002MU router (firmware build Hh-B2021112
A buffer overflow in TOTOLINK A3002MU routers running firmware Hh-B20211125.1046 lets an authenticated remote attacker c
Stack-based buffer overflow in the Totolink A3002MU router's boa HTTP server allows a network-adjacent authenticated att
Stack-based buffer overflow in Totolink A3002MU router firmware B20211125.1046 allows authenticated remote attackers to
Path traversal in the Totolink A3002MU router's File Upload Handler (firmware 1.0.0-B20230403.1455) allows remote unauth
Cross-site scripting in the Anchor Tag Handler of Totolink A3002MU firmware version Hh-B20211125.1046 allows network-acc
Same weakness CWE-285 – Improper Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today