CVE-2021-46010

Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration. The SESSION_ID is predictable. An attacker can hijack a valid session and conduct further malicious operations.
References
Link Resource
http://a3100r.com Broken Link
https://hackmd.io/Ynwm8NnQSiK0xm7QKuNteg Exploit Third Party Advisory
http://totolink.com Vendor Advisory
Configurations

Configuration 1


Information

Published : 2022-03-30 11:15

Updated : 2022-04-05 07:10


NVD link : CVE-2021-46010

Mitre link : CVE-2021-46010

Products Affected
No products.
CWE