← Database

CVE-2022-48113

CRITICAL CVSS: 9.8 Published: 2023-02-02 Modified: 2026-06-17

Description

A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet service via a crafted POST request. Attackers are also able to leverage this vulnerability to login as root via hardcoded credentials.

Affected Platforms

Totolink N200Re-V5 FirmwareTotolink N200Re-V5

Weakness Type

CWE-798, CWE-798

References