TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control. Attackers are able to reset serveral critical passwords without authentication by visiting specific pages.
History

Mon, 28 Oct 2024 20:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284

Mon, 28 Oct 2024 19:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-863
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 06 Sep 2024 21:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-10-31T00:00:00

Updated: 2024-10-28T19:06:24.639Z

Reserved: 2023-10-30T00:00:00

Link: CVE-2023-46992

cve-icon Vulnrichment

Updated: 2024-08-02T21:01:22.694Z

cve-icon NVD

Status : Modified

Published: 2023-10-31T15:15:09.787

Modified: 2024-11-21T08:29:36.267

Link: CVE-2023-46992

cve-icon Redhat

No data.