by Kastro
Paper/Archive/CVE-2021-46009

CVE-2021-46009

mitre — In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication.

EPSS 13%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 96.2.962 × 2019.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without cookies.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refhackmd.io/-riYp6Q-ReCx-dKKWFBTLg