First published: Fri Feb 04 2022(Updated: )
TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Totolink X5000r Firmware | =9.1.0u.6118_b20201102 | |
TOTOLINK X5000R |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for TOTOLINK X5000R is CVE-2021-45735.
The severity of CVE-2021-45735 is high with a CVSS score of 7.5.
The vulnerability allows attackers to intercept user credentials via packet capture software by exploiting the use of HTTP protocol for authentication in the admin interface.
The affected software version of TOTOLINK X5000R is 9.1.0u.6118_B20201102.
Yes, TOTOLINK X5000R is vulnerable to CVE-2021-45735.