CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. Its EPSS score suggests a 12.2% probability of exploitation in the next 30 days.
CVE
CVE-2021-46009
Severity
CRITICAL
CVSS
9.8
EPSS
12.25%
Original NVD Description
In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without cookies.
Related CVEs
Other vulnerabilities affecting the same vendor(s)