Description

A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime parameters.

Related CPE's

o

totolink

a3100r_firmware

Vulnerable

h

totolink

a3100r

-

References

http://a3100r.com

Broken Link

http://totolink.com

Vendor Advisory

https://drive.google.com/file/d/1_9ru2GRZ13T1KQKXPq2E14-opgf9ih45/view?usp=sharing

Broken Link

https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/170.html

ProductVendor Advisory

Weaknesses

[email protected]

Primary
CWE-77

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2022-03-11T16:15:07.980

3 years ago

Last modified

2022-03-18T15:22:45.877

3 years ago