# Totolink A3002r Firmware


- [CVE-2025-55591](https://insights.sbomify.com/CVE-2025-55591/): Command injection in n/a (critical 9.8)
- [CVE-2025-45858](https://insights.sbomify.com/CVE-2025-45858/): Command injection in n/a (critical 9.8)
- [CVE-2025-45861](https://insights.sbomify.com/CVE-2025-45861/): Memory corruption in n/a (critical 9.8)
- [CVE-2025-45863](https://insights.sbomify.com/CVE-2025-45863/): Memory corruption in n/a (critical 9.8)
- [CVE-2025-45865](https://insights.sbomify.com/CVE-2025-45865/): Memory corruption in n/a (critical 9.8)
- [CVE-2025-25579](https://insights.sbomify.com/CVE-2025-25579/): Command injection in n/a (critical 9.8)
- [CVE-2024-42520](https://insights.sbomify.com/CVE-2024-42520/): Memory corruption in n/a (critical 9.8)
- [CVE-2022-40109](https://insights.sbomify.com/CVE-2022-40109/): Missing authorization in n/a (critical 9.8)
- [CVE-2022-40111](https://insights.sbomify.com/CVE-2022-40111/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2024-54907](https://insights.sbomify.com/CVE-2024-54907/): Code injection in n/a (high 8.8)
- [CVE-2024-34195](https://insights.sbomify.com/CVE-2024-34195/): Memory corruption in n/a (high 8.8)
- [CVE-2020-25499](https://insights.sbomify.com/CVE-2020-25499/): Command injection in n/a (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/totolink/a3002r-firmware/