CVE-2022-28492

TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login

published March 23, 2023

CVSS
—
EPSS
1%
Percentile
70.5
In the wild
Unconfirmed
What it is

⚠️ A sneaky login bypass is lurking in TOTOLINK routers with firmware V6.3c.566, making unauthorized access easier than it should be! 🔐 Think of a bustling restaurant where an employee is letting patrons into the kitchen without checking reservations—anyone could waltz in and do as they please! If an attacker exploits this flaw, they could log in without proper credentials, potentially altering settings or spying on your network. This could lead to unauthorized access to sensitive data, impacting your network security significantly!

Put simply

Think of a bustling restaurant where an employee is letting patrons into the kitchen without checking reservations—anyone could waltz in and do as they please! This vulnerability allows remote attackers to bypass the login process due to improper authentication checks. As a result, unauthorized users can gain access to the device's administrative features.

What to do

If an attacker exploits this flaw, they could log in without proper credentials, potentially altering settings or spying on your network. This could lead to unauthorized access to sensitive data, impacting your network security significantly! To protect yourself, upgrade your TOTOLINK firmware to the latest version as soon as possible. Always ensure that your network devices are running supported firmware to minimize risks. Don’t forget to regularly check for updates! You've got this! Secure your network, and you’ll be a cybersecurity hero in no time! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01313 · 70.5th percentile
Published
2023-03-23T00:00Z
EPSS history
Timeline
  • 23 MAR 00:00Z
    TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login
    cvelistv5