CVE-2026-93742: Command Injection in Totolink A3002MU
CVE-2026-93742 is a critical command injection vulnerability in the Totolink A3002MU router, specifically in the formWsc function of the /boafrm/formWsc file. The vulnerability arises from improper handling of the localPin argument, allowing remote attackers to execute arbitrary commands. The exploit code has been publicly disclosed, increasing the risk of exploitation.
AI Analysis
Technical Summary
This vulnerability affects the Totolink A3002MU device running firmware version Hh-B20211125.1046. The flaw exists in the formWsc function within the /boafrm/formWsc file, where manipulation of the localPin parameter leads to command injection. This can be exploited remotely without user interaction, potentially allowing attackers to execute arbitrary commands on the device. The CVSS 4.0 base score is 9.4, indicating a critical severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The exploit has been publicly released, which could facilitate attacks.
Potential Impact
Successful exploitation allows remote attackers to execute arbitrary commands on the affected device, potentially leading to full compromise of the router. This could result in unauthorized control over network traffic, data interception, or further attacks on connected systems.
Mitigation Recommendations
No patch or official remediation information is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, affected devices should be isolated from untrusted networks or have access restricted to trusted users only.
CVE-2026-93742: Command Injection in Totolink A3002MU
Description
CVE-2026-93742 is a critical command injection vulnerability in the Totolink A3002MU router, specifically in the formWsc function of the /boafrm/formWsc file. The vulnerability arises from improper handling of the localPin argument, allowing remote attackers to execute arbitrary commands. The exploit code has been publicly disclosed, increasing the risk of exploitation.
CVSS v4.0
Score 9.4critical
Affected software
Totolink
A3002MU
cpe:2.3:a:totolink:a3002mu:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects the Totolink A3002MU device running firmware version Hh-B20211125.1046. The flaw exists in the formWsc function within the /boafrm/formWsc file, where manipulation of the localPin parameter leads to command injection. This can be exploited remotely without user interaction, potentially allowing attackers to execute arbitrary commands on the device. The CVSS 4.0 base score is 9.4, indicating a critical severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The exploit has been publicly released, which could facilitate attacks.
Potential Impact
Successful exploitation allows remote attackers to execute arbitrary commands on the affected device, potentially leading to full compromise of the router. This could result in unauthorized control over network traffic, data interception, or further attacks on connected systems.
Mitigation Recommendations
No patch or official remediation information is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, affected devices should be isolated from untrusted networks or have access restricted to trusted users only.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-09-18T15:43:51.231Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6aae4c0a55bf5e2cf55746cc
Added to database: 09/19/2026, 08:47:06 UTC
Last enriched: 09/19/2026, 09:01:29 UTC
Last updated: 09/19/2026, 09:40:04 UTC
Views: 21
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.