Description
A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entry_name leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Published: 2026-10-05
Score: 10 Critical
EPSS: 1.1% Low
KEV: No
Impact: Remote Buffer Overflow
Action: Immediate Patch
AI Analysis

Impact

An attacker can trigger a stack‑based buffer overflow by supplying a specially crafted value for the addQos/comment/entry_name argument in the /boafrm/formIpQoS handler. The overflow can be triggered remotely and may allow the attacker to compromise the router with the privileges of the web management interface. The flaw is identified as CWE‑119 and CWE‑121, representing uncontrolled buffer overflows.

Affected Systems

The flaw is present only in the Totolink A3002MU firmware version 1.0.0‑B20230403.1455. Devices running this firmware expose the vulnerability through the web‑based QoS Rule feature. The vulnerability is specific to the Totolink A3002MU product line.

Risk and Exploitability

The CVSS score of 10 indicates a critical severity. Remote exploitation is explicitly possible, and the exploit has been publicly disclosed. The EPSS score is 1%. The vulnerability is not listed in the CISA KEV catalog, but the publicly available exploit evidence indicates an urgency for exposed devices.

Generated by OpenCVE AI on October 5, 2026 at 15:09 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest firmware update from Totolink that eliminates the stack buffer overflow in QoS Rule Handler.
  • If no update is immediately available, block remote access to /boafrm/formIpQoS or disable the QoS Rule feature to prevent exploitation.
  • Implement input length restrictions on the web management interface for addQos/comment/entry_name (e.g., limit to 256 characters) to mitigate the buffer overflow risk.

Generated by OpenCVE AI on October 5, 2026 at 15:09 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 05 Oct 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 05 Oct 2026 09:45:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entry_name leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Title Totolink A3002MU QoS Rule formIpQoS stack-based overflow
First Time appeared Totolink
Totolink a3002mu
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:a:totolink:a3002mu:*:*:*:*:*:*:*:*
Vendors & Products Totolink
Totolink a3002mu
References
Metrics cvssV2_0

{'score': 10, 'vector': 'AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 10, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 10, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Totolink A3002mu
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-05T12:46:46.181Z

Reserved: 2026-10-04T22:17:48.917Z

Link: CVE-2026-105285

cve-icon Vulnrichment

Updated: 2026-10-05T12:46:38.857Z

cve-icon NVD

Status : Received

Published: 2026-10-05T10:16:38.520

Modified: 2026-10-05T13:16:52.460

Link: CVE-2026-105285

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-05T15:15:08Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow