← Database

CVE-2021-46006

MEDIUM CVSS: 6.5 Published: 2022-03-30 Modified: 2026-07-09

Description

In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authentication.

Affected Platforms

Totolink A3100R FirmwareTotolink A3100R

Weakness Type

CWE-306

References