PT-2025-33688 · Totolink · Totolink A3002Ru

CVE-2025-55588

·

Published

2025-08-18

·

Updated

2025-08-19

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404
Description: The TOTOLINK A3002R device contains a buffer overflow in the fw ip parameter at the /boafrm/formPortFw API endpoint. This issue allows attackers to cause a Denial of Service (DoS) via a crafted input.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2025-11144
CVE-2025-55588

Affected Products

Totolink A3002Ru