Vulnerability Details CVE-2021-44620
A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.041
EPSS Ranking 88.0%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://a3100r.com
- http://totolink.com
- https://drive.google.com/file/d/1_9ru2GRZ13T1KQKXPq2E14-opgf9ih45/view?usp=sharing
- https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/170.html
- http://a3100r.com
- http://totolink.com
- https://drive.google.com/file/d/1_9ru2GRZ13T1KQKXPq2E14-opgf9ih45/view?usp=sharing
Products affected by CVE-2021-44620
-
cpe:2.3:h:totolink:a3100r:-
-
cpe:2.3:o:totolink:a3100r_firmware:4.1.2cu.5050_b20200504