a3002r firmware vulnerabilities and fixes

Recent CVEs affecting a3002r firmware, with upgrade or downgrade steps. 41 tracked.

Also searched as: a3002rfirmware.

a3002r firmware has 41 tracked vulnerabilities, 7 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-06-22. Highest priority: CVE-2025-45858 (score 71/100).

• CVE-2025-6487 HIGH 8.8 MITIGATE A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128
• CVE-2025-6486 HIGH 8.8 MITIGATE A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128
• CVE-2025-6485 MEDIUM 6.3 MITIGATE A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128
• CVE-2025-6393 HIGH 8.8 MITIGATE MITIGATE A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.
• CVE-2025-6337 HIGH 8.8 MITIGATE MITIGATE A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615/4.0.0-B20230531.1404
• CVE-2025-6164 HIGH 8.8 MITIGATE A vulnerability was found in TOTOLINK A3002R 4.0.0-B20230531.1404
• CVE-2025-6149 HIGH 8.8 MITIGATE A vulnerability classified as critical has been found in TOTOLINK A3002R 4.0.0-B20230531.1404
• CVE-2025-4852 LOW 2.4 MITIGATE A vulnerability, which was classified as problematic, has been found in TOTOLINK A3002R 2.1.1-B20230720.1011
• CVE-2025-4835 HIGH 8.8 MITIGATE MITIGATE A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615
• CVE-2025-4834 HIGH 8.8 MITIGATE MITIGATE A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615
• CVE-2025-4833 HIGH 8.8 MITIGATE MITIGATE A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critica
• CVE-2025-4832 HIGH 8.8 MITIGATE MITIGATE A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as cr
• CVE-2025-4831 HIGH 8.8 MITIGATE MITIGATE A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B2023
• CVE-2025-4830 HIGH 8.8 MITIGATE MITIGATE A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-
• CVE-2025-4829 HIGH 8.8 MITIGATE MITIGATE A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615
• CVE-2025-4827 HIGH 8.8 MITIGATE MITIGATE A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B2023
• CVE-2025-4826 HIGH 8.8 MITIGATE MITIGATE A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-
• CVE-2025-4825 HIGH 8.8 MITIGATE MITIGATE A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615
• CVE-2025-4824 HIGH 8.8 MITIGATE MITIGATE A vulnerability classified as critical has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.16
• CVE-2025-4823 HIGH 8.8 MITIGATE MITIGATE A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615
• CVE-2025-4733 HIGH 8.8 MITIGATE MITIGATE A vulnerability, which was classified as critical, has been found in TOTOLINK A3002R and A3002RU 3.0.0-B202308
• CVE-2025-4732 HIGH 8.8 MITIGATE MITIGATE A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615
• CVE-2025-4731 HIGH 8.8 MITIGATE MITIGATE A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615
• CVE-2025-4730 HIGH 8.8 MITIGATE MITIGATE A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615
• CVE-2025-4729 MEDIUM 6.3 MITIGATE MITIGATE A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615
• CVE-2025-45867 MEDIUM 5.4 MITIGATE TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the static_dns1 paramete
• CVE-2025-45866 MEDIUM 5.4 MITIGATE TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd paramete
• CVE-2025-45865 CRITICAL 9.8 MITIGATE TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in
• CVE-2025-45864 MEDIUM 5.4 MITIGATE TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parame
• CVE-2025-45863 CRITICAL 9.8 MITIGATE TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in
• CVE-2025-45861 CRITICAL 9.8 MITIGATE TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter
• CVE-2025-45859 MEDIUM 5.4 MITIGATE TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in
• CVE-2025-45858 CRITICAL 9.8 MITIGATE TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_
• CVE-2025-25635 HIGH 8.0 MITIGATE TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability
• CVE-2025-25610 HIGH 8.0 MITIGATE TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability
• CVE-2025-25609 HIGH 8.0 MITIGATE TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability
• CVE-2025-25579 CRITICAL 9.8 MITIGATE TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.
• CVE-2024-54907 HIGH 8.8 MITIGATE TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc.
• CVE-2024-42520 CRITICAL 9.8 MITIGATE TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentContr
• CVE-2024-34195 CRITICAL 9.8 MITIGATE TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow
• CVE-2024-33820 HIGH 7.5 MITIGATE Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware V4.0.0-B20230531.1404 is vulnerable to Bu

FAQ

How do I fix a3002r firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is a3002r firmware being exploited right now?

None of the tracked a3002r firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which a3002r firmware CVE should I patch first?

CVE-2025-45858 currently ranks highest (71/100): TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_.

RSS feed for a3002r firmware · ← Back to latest CVEs