CVE-2021-46009

In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without cookies.

CVSS v3 9.8 CRITICAL
CVSS v2.0 10.0 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://a3100r.com	Broken Link
http://totolink.com	Vendor Advisory
https://hackmd.io/-riYp6Q-ReCx-dKKWFBTLg	Exploit Third Party Advisory
http://a3100r.com	Broken Link
http://totolink.com	Vendor Advisory
https://hackmd.io/-riYp6Q-ReCx-dKKWFBTLg	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:totolink:a3100r_firmware:5.9c.4577:*:*:*:*:*:*:*

cpe:2.3:h:totolink:a3100r:-:*:*:*:*:*:*:*

History

21 Nov 2024, 06:33

Type	Values Removed	Values Added
References	~~() http://a3100r.com - Broken Link~~	() http://a3100r.com - Broken Link
References	~~() http://totolink.com - Vendor Advisory~~	() http://totolink.com - Vendor Advisory
References	~~() https://hackmd.io/-riYp6Q-ReCx-dKKWFBTLg - Exploit, Third Party Advisory~~	() https://hackmd.io/-riYp6Q-ReCx-dKKWFBTLg - Exploit, Third Party Advisory

Information

Published : 2022-03-30 23:15

Updated : 2024-11-21 06:33

NVD link : CVE-2021-46009

Mitre link : CVE-2021-46009

CVE.ORG link : CVE-2021-46009

JSON object : View

Products Affected

totolink

a3100r_firmware
a3100r

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2021-46009", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-03-30T23:15:07.907", "references": [{"url": "http://a3100r.com", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://totolink.com", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://hackmd.io/-riYp6Q-ReCx-dKKWFBTLg", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://a3100r.com", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://totolink.com", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://hackmd.io/-riYp6Q-ReCx-dKKWFBTLg", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without cookies."}, {"lang": "es", "value": "En Totolink A3100R Versi\u00f3n 5.9c.4577, varias p\u00e1ginas pueden ser le\u00eddas por curl o Burp Suite sin autenticaci\u00f3n. Adem\u00e1s, pueden establecerse configuraciones de administraci\u00f3n sin cookies"}], "lastModified": "2024-11-21T06:33:28.383", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:totolink:a3100r_firmware:5.9c.4577:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "393F2623-291A-4E8B-80D6-D40193EE045A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:totolink:a3100r:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "40729E79-9D89-440F-B38D-E62D310E27F9"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}