CVE-2024-51228: Totolink a3002ru Firmware

Medium severity, CVSS 6.8. EPSS: 3.9% chance of exploitation in the next 30 days.

An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1420 and TOTOLINK-CX-N300RT V2.1.8-B20171113.1408 and TOTOLINK-CX-N300RT V2.1.8-B20191010.1107 and TOTOLINK-CX-N302RE V2.0.2-B20170511.1523 allows a remote attacker to execute arbitrary code via the /boafrm/formSysCmd component.

Affected products

• Totolink a3002ru Firmware: version 1.0.4-B20171106.1512 only
• Totolink n150rt Firmware: version 2.1.6-B20171121.1002 only
• Totolink n300rt Firmware: version 2.1.6-B20170724.1420 only; version 2.1.8-B20171113.1408 only; version 2.1.8-B20191010.1107 only
• Totolink n302re Firmware: version 2.0.2-B20170511.1523 only

Published 2024-11-27. Last modified 2026-06-17.