CVE-2024-54907

TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

1.14% chance of exploitation in the next 30 days, 64th percentile

Published

2024-12-26

Proof-of-concept exploits (1)

• MnrikSrins/totolink_A3002R_RCE1★ · 2024-11-20

References

• CVE Record
• NVD entry

Related

• CVE-2024-54887
• CVE-2024-54910
• CVE-2024-54880
• CVE-2024-54951
• CVE-2024-5488
• CVE-2024-5499