PT-2023-12944 · Totolink Technology · Totolink Cpe

Published 2023-03-23 · Updated 2023-03-27 · CVE-2022-28492

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology CPE version V6.3c.566

Description The issue allows remote attackers to bypass login, potentially granting unauthorized access.

Recommendations For TOTOLINK Technology CPE version V6.3c.566, consider disabling remote login functionality until a patch is available. Restrict access to the device to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2022-28492

Affected Products

Totolink Cpe

References · 5

• 🔥 https://github.com/B2eFly/CVE/blob/main/totolink/CP900/8/8.md · Exploit
• https://osv.dev/vulnerability/CVE-2022-28492 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28492 · Security Note
• ❌ https://github.com/B2eFly/Router/blob/main/totolink/CP900/8/8.md · Note, Deleted
• https://t.me/cibsecurity/60569 · Telegram Post