high7.5

CVE-2023-46992

TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control.

Impact

TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control. Attackers are able to reset serveral critical passwords without authentication by visiting specific pages.

Affected products

Vendor	Product	Affected versions
Totolink	A3300r Firmware	Version 17.0.0cu.557_b20221024

Weakness classification

CWE-863

References

NVD record
CVE.org record
https://github.com/AuroraHaaash/vul_report/blob/main/TOTOLINK%20A3300R/readme.md
https://github.com/AuroraHaaash/vul_report/blob/main/TOTOLINK%20A3300R/readme.md