Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Sat, 19 Sep 2026 08:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of the file /boafrm/formWsc. This manipulation of the argument localPin causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. | |
| Title | Totolink A3002MU formWsc command injection | |
| First Time appeared |
Totolink
Totolink a3002mu |
|
| Weaknesses | CWE-74 CWE-77 |
|
| CPEs | cpe:2.3:a:totolink:a3002mu:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Totolink
Totolink a3002mu |
|
| References |
| |
| Metrics |
cvssV2_0
|
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2026-09-19T08:30:21.147Z
Reserved: 2026-09-18T15:43:51.231Z
Link: CVE-2026-93742
No data.
No data.
No data.
OpenCVE Enrichment
No data.