Summary
generated automatically from NVD dataA buffer overflow (CWE-119) affects the Totolink A3002MU Hh-B20211125.1046 in the formNewSchedule function of /boafrm/formNewSchedule, part of the boa component. Manipulating the submit-url argument triggers the memory corruption, and the attack can be carried out remotely over the network. The NVD description notes that an exploit has been made public, and the flaw carries a CVSS v3.1 score of 9.9 (CRITICAL).
NVD description
A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used.
EPSS · FIRST.org
0.85%probability of exploitation in the next 30 days
Higher than 57% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v3.1 Score
Information
- Published
- 14 sept. 2026
- Updated
- 14 sept. 2026
- Status
- Deferred
- Source
- cna@vuldb.com
Weaknesses (CWE)
Similar CVEs
Other vulnerabilities of type CWE-119
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.