Remote Login Bypass Vulnerability in TOTOLINK Technology Products
CVE-2022-28492

9.8CRITICAL

Key Information:

Vendor

Totolink
Status
Cp900 Firmware
Vendor
CVE Published:
23 March 2023

What is CVE-2022-28492?

A vulnerability exists in TOTOLINK Technology's CPE devices with firmware version V6.3c.566, allowing remote attackers to bypass authentication mechanisms. This enables potential unauthorized access, putting the sensitive information and operations at risk. Users are advised to apply security updates and review access controls to mitigate this threat.

References

https://github.com/B2eFly/Router/blob/main/totolink/CP900...
https://github.com/B2eFly/CVE/blob/main/totolink/CP900/8/...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.