CyberRota Analysis
AI-GeneratedA vulnerability in the authentication handler of TOTOLINK N600R firmware allows for insufficiently random values during the login process, potentially enabling remote attacks. Although the exploit requires high complexity and is considered difficult to execute, organizations using this firmware should prioritize patching to mitigate potential risks. Users and administrators of affected devices should remain vigilant and apply updates as they become available.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function loginAuth of the file /web_cste/cgi-bin/cstecgi.cgi of the component Authentication Handler. Such manipulation leads to insufficiently random values. It is possible to launch the attack remotely. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit has been disclosed to the public and may be used.