← Database

CVE-2021-46010

HIGH CVSS: 8.8 Published: 2022-03-30 Modified: 2026-07-09

Description

Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration. The SESSION_ID is predictable. An attacker can hijack a valid session and conduct further malicious operations.

Affected Platforms

Totolink A3100R FirmwareTotolink A3100R

Weakness Type

CWE-330

References