Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-105285

Totolink A3002MU QoS Rule formIpQoS stack-based overflow

Description

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entry_name leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Totolink A3002MU

  • 1.0.0-B20230403.1455affected

References