{"id":"CVE-2026-90605","state":"PUBLISHED","title":"Totolink A3002MU boa formFilter buffer overflow","description":"A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the function formFilter of the file /boafrm/formFilter of the component boa. Executing a manipulation of the argument ip6addr can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.","publishedAt":"2026-09-13T23:30:11.008Z","updatedAt":"2026-09-15T13:58:48.810Z","severity":{"score":9.4,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P","source":"VulDB"},"assigner":"VulDB","products":["Totolink A3002MU"],"affected":[{"vendor":"Totolink","product":"A3002MU","versions":[{"version":"Hh-B20211125.1046","status":"affected"}],"cpes":["cpe:2.3:a:totolink:a3002mu:*:*:*:*:*:*:*:*"],"modules":["boa"]}],"references":["https://vuldb.com/vuln/403187","https://vuldb.com/vuln/403187/cti","https://vuldb.com/cve/CVE-2026-90605","https://vuldb.com/submit/914009","https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A3002MU/bof-formFilter.md","https://www.totolink.net/"],"weaknesses":["CWE-120","CWE-119"],"ingestedAt":"2026-10-29T20:13:34.582Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/90xxx/CVE-2026-90605.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-90605","state":"PUBLISHED","datePublished":"2026-09-13T23:30:11.008Z","dateUpdated":"2026-09-15T13:58:48.810Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-09-12T19:30:28.764Z"},"containers":{"cna":{"title":"Totolink A3002MU boa formFilter buffer overflow","descriptions":[{"lang":"en","value":"A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the function formFilter of the file /boafrm/formFilter of the component boa. Executing a manipulation of the argument ip6addr can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks."}],"affected":[{"vendor":"Totolink","product":"A3002MU","versions":[{"version":"Hh-B20211125.1046","status":"affected"}],"cpes":["cpe:2.3:a:totolink:a3002mu:*:*:*:*:*:*:*:*"],"modules":["boa"]}],"references":[{"url":"https://vuldb.com/vuln/403187","name":"VDB-403187 | Totolink A3002MU boa formFilter buffer overflow","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/403187/cti","name":"VDB-403187 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-90605","name":"CVE-2026-90605 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/914009","name":"Submit #914009 | totolink A3002MU Hh-B20211125.1046 Buffer Overflow","tags":["third-party-advisory"]},{"url":"https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A3002MU/bof-formFilter.md","tags":["exploit"]},{"url":"https://www.totolink.net/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":9.4,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P","baseSeverity":"CRITICAL"}},{"cvssV3_1":{"version":"3.1","baseScore":9.9,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"CRITICAL"}},{"cvssV3_0":{"version":"3.0","baseScore":9.9,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"CRITICAL"}},{"cvssV2_0":{"version":"2.0","baseScore":9,"vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","type":"CWE","lang":"en","description":"Buffer Overflow"}]},{"descriptions":[{"cweId":"CWE-119","type":"CWE","lang":"en","description":"Memory Corruption"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-09-13T23:30:11.008Z"},"timeline":[{"time":"2026-09-12T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-09-12T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-09-12T21:36:17.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"sunnyyang (VulDB User)","type":"reporter"}],"x_generator":["VulDB PVTS v202609"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-15T13:49:13.706523Z","id":"CVE-2026-90605","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-15T13:58:48.810Z"}}]}}}