← Database

CVE-2021-46009

CRITICAL CVSS: 9.8 Published: 2022-03-30 Modified: 2026-07-09

Description

In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without cookies.

Affected Platforms

Totolink A3100R FirmwareTotolink A3100R

Weakness Type

CWE-306

References