high8.8
CVE-2021-46010
Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration.
Impact
Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration. The SESSION_ID is predictable. An attacker can hijack a valid session and conduct further malicious operations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A3100r Firmware | Version 5.9c.4577 |