{"id":"CVE-2024-54907","aliases":["EUVD-2024-52690","GHSA-p5x7-32hj-qcxr"],"status":"published","title":"TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via...","description":"TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.0113,"percentile":0.66641,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2024-12-26T00:00:00Z","modified":"2026-06-17T08:10:46Z","products":[{"vendor":"totolink","product":"a3002r_firmware"}],"references":[{"url":"https://github.com/MnrikSrins/totolink_A3002R_RCE","tags":["Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54907"},{"url":"https://github.com/advisories/GHSA-p5x7-32hj-qcxr"}],"sources":{"cve":[{"id":"CVE-2024-54907","description":"TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc.","status":"published","published":"2024-12-26T00:00:00Z","modified":"2024-12-26T19:24:54.793Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:33:59.177173Z"}],"euvd":[{"id":"EUVD-2024-52690","description":"TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc.","status":"published","published":"2024-12-26T00:00:00Z","modified":"2024-12-26T19:24:54Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:32.701542Z"}],"ghsa":[{"id":"GHSA-p5x7-32hj-qcxr","title":"TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via...","description":"TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc.","status":"published","published":"2024-12-26T21:30:36Z","modified":"2024-12-26T21:30:42Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:59:16.46237Z"}],"nvd":[{"id":"CVE-2024-54907","description":"TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc.","status":"published","published":"2024-12-26T19:15:08.153Z","modified":"2026-06-17T08:10:46.22Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:10:41.091507Z"}]}}