CVE-2023-23064

TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control

Critical · published February 17, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
52.7
In the wild
Unconfirmed
What it is

🚨 This TOTOLINK vulnerability is a game-changer—incorrect access control means unauthorized users can access sensitive settings! 🔥 Think of it like a hotel where anyone can waltz into the manager's office without needing a keycard! This totally disregards privacy and security, allowing potential mischief to run rampant. With this flaw, an attacker could easily modify critical router configurations, potentially allowing them to snoop on network traffic or even hijack devices connected to the network. The implications are absolutely devastating for any home or business using this vulnerable router.

Put simply

Think of it like a hotel where anyone can waltz into the manager's office without needing a keycard! This totally disregards privacy and security, allowing potential mischief to run rampant. The vulnerability stems from improper access control in the TOTOLINK A720R firmware, meaning that unauthorized users can gain administrative access without proper authentication checks.

What to do

With this flaw, an attacker could easily modify critical router configurations, potentially allowing them to snoop on network traffic or even hijack devices connected to the network. The implications are absolutely devastating for any home or business using this vulnerable router. To protect yourself, immediately update your firmware to version V4.1.5cu.532_B20210610 or later. Additionally, ensure that strong access controls and unique passwords are implemented to safeguard your configurations. You've got this! Act quickly and secure your network like the hero you are! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00702 · 52.7th percentile
Published
2023-02-17T00:00Z
EPSS history
Timeline
  • 17 FEB 00:00Z
    TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control
    cvelistv5