Jiangxiazhe/IOT_hack

Releases0

A repo for IOT vulnerabilities

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-45862 ↗	May 20, 2025Tuesday, 20 May 2025, 14:15	6.5 MEDIUM	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the interfacenameds parameter in the formDhcpv6s interface.
CVE-2025-45863 ↗	May 13, 2025Tuesday, 13 May 2025, 20:15	9.8 CRITICAL	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface.
CVE-2025-45861 ↗	May 13, 2025Tuesday, 13 May 2025, 19:15	9.8 CRITICAL	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface.
CVE-2025-45865 ↗	May 13, 2025Tuesday, 13 May 2025, 19:15	9.8 CRITICAL	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface.
CVE-2025-45857 ↗	May 13, 2025Tuesday, 13 May 2025, 16:15	9.8 CRITICAL	—
EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via the command parameter in the mp function.
CVE-2025-45858 ↗	May 13, 2025Tuesday, 13 May 2025, 16:15	9.8 CRITICAL	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.
CVE-2025-45859 ↗	May 13, 2025Tuesday, 13 May 2025, 15:15	5.4 MEDIUM	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interface.
CVE-2025-45864 ↗	May 13, 2025Tuesday, 13 May 2025, 15:15	5.4 MEDIUM	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface.
CVE-2025-45866 ↗	May 13, 2025Tuesday, 13 May 2025, 15:15	5.4 MEDIUM	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s interface.
CVE-2025-45867 ↗	May 13, 2025Tuesday, 13 May 2025, 15:15	5.4 MEDIUM	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the static_dns1 parameter in the formIpv6Setup interface.