CVE-2023-43141

TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control

published September 25, 2023

CVSS
โ€”
EPSS
1%
Percentile
55.7
In the wild
Unconfirmed
What it is

โš ๏ธ Access controls are on vacation! In the TOTOLINK A3700R and N600R models, a misconfigured access control could leave your network wide open for unwanted visitors. ๐Ÿ”“ Think of it like a hotel where the front desk forgot to check IDs. Anyone could waltz in and stroll straight to any room without a key โ€” not the kind of hospitality you want! An attacker could potentially gain unauthorized access to sensitive settings or data on your router, putting your entire home network at risk. This could lead to data breaches or malicious configuration changes, all while you thought your network was secure.

Put simply

Think of it like a hotel where the front desk forgot to check IDs. Anyone could waltz in and stroll straight to any room without a key โ€” not the kind of hospitality you want! This vulnerability arises from improper access control mechanisms in the TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 routers, allowing unauthorized users to access sensitive functions without proper authentication.

What to do

An attacker could potentially gain unauthorized access to sensitive settings or data on your router, putting your entire home network at risk. This could lead to data breaches or malicious configuration changes, all while you thought your network was secure. To protect yourself, update your router firmware to the latest version offered by TOTOLINK. Regularly check for firmware updates, and ensure strong, unique passwords for your device settings. Don't forget to review your network's security settings and protocols! This is fixable! Follow these steps and you'll have your network secured in no time! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00787 ยท 55.7th percentile
Published
2023-09-25T00:00Z
EPSS history
Timeline
  • 25 SEP 00:00Z
    TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control
    cvelistv5