CVE-2021-44620: Command Injection
A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050B20200504 in adm/ntm.asp via the hosTime parameters.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-44620?
CVE-2021-44620 is a Command Injection vulnerability in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp.
How does CVE-2021-44620 affect TOTOLINK A3100R?
CVE-2021-44620 allows an attacker to execute arbitrary commands on TOTOLINK A3100R devices.
What is the severity of CVE-2021-44620?
CVE-2021-44620 has a severity rating of critical with a CVSS score of 9.8.
How can I fix CVE-2021-44620 on TOTOLINK A3100R?
To fix CVE-2021-44620, update the firmware of TOTOLINK A3100R to version 4.1.2cu.5050_B20200504 or later.
Where can I find more information about CVE-2021-44620?
You can find more information about CVE-2021-44620 at the following references: [http://a3100r.com](http://a3100r.com), [http://totolink.com](http://totolink.com), and [https://drive.google.com/file/d/1_9ru2GRZ13T1KQKXPq2E14-opgf9ih45/view?usp=sharing](https://drive.google.com/file/d/1_9ru2GRZ13T1KQKXPq2E14-opgf9ih45/view?usp=sharing).