Information Disclosure in Totolink Router Affecting Multiple Versions

CVE-2022-48067

What is CVE-2022-48067?

An information disclosure vulnerability present in the Totolink A830R router (version V4.1.2cu.5182) enables attackers to potentially gain access to sensitive information, such as the root password. The vulnerability is primarily exploitable through a brute-force attack method, which can allow malicious actors to bypass security measures and exploit affected systems. Users are advised to take caution and apply vendor recommendations to mitigate risk.

References