CVE-2021-46006

In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated

published March 30, 2022

CVSS
—
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authentication.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05503 · 92.8th percentile
Published
2022-03-30T22:43Z
EPSS history
Timeline
  • 30 MAR 22:43Z
    In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated
    cvelistv5