CVE-2021-46006 in A3100R

الملخص

بحسب MITRE • 31/03/2022

In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authentication.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• حجز: 03/01/2022
• إفشاء: 31/03/2022
• الاعتدال: تمت الموافقة
• إدخال: VDB-196171
• CPE: جاهز
• CWE: CWE-287 (مؤكد)
• CVSS: 6.5 (NVD)
• EPSS: 0.05503
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-46006
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-46006
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-46006/