PT-2022-11882 · Totolink · Totolink Ex300 V2+1

Published 2022-03-30 · Updated 2022-07-12 · CVE-2021-43662

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions totolink EX300 v2 version V4.0.3c.140 B20210429 totolink A720R version V4.1.5cu.470 B20200911

Description The issue causes uncontrolled resource consumption.

Recommendations For totolink EX300 v2 version V4.0.3c.140 B20210429, at the moment, there is no information about a newer version that contains a fix for this issue. For totolink A720R version V4.1.5cu.470 B20200911, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2021-43662

Affected Products

Totolink A720R

Totolink Ex300 V2

References · 3

• 🔥 https://github.com/chibataiki/iot-vuls/blob/main/totolink/dos.md · Exploit
• https://osv.dev/vulnerability/CVE-2021-43662 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43662 · Security Note