Description

A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime parameters.

Related CPE's

o

totolink

a3100r_firmware

Vulnerable

h

totolink

a3100r

-

References

http://a3100r.com

Broken Link

http://totolink.com

Vendor Advisory

https://drive.google.com/file/d/1_9ru2GRZ13T1KQKXPq2E14-opgf9ih45/view?usp=sharing

Broken Link

https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/170.html

ProductVendor Advisory

http://a3100r.com

Broken Link

http://totolink.com

Vendor Advisory

https://drive.google.com/file/d/1_9ru2GRZ13T1KQKXPq2E14-opgf9ih45/view?usp=sharing

Broken Link

Weaknesses

[email protected]

Primary
CWE-77

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2022-03-11T15:15:07.980Z

4 years ago

Last modified

2024-11-21T05:31:16.827Z

1 year ago