CVE-2021-45735: High severity totolink x5000r firmware vulnerability
Published Feb 4, 2022
·Updated
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software.
Affected Software
2 affected components
TOTOLINK X5000r Firmware=9.1.0u.6118_b20201102
TOTOLINK X5000R
Event History
Feb 4, 2022
CVE Published
via MITRE·01:33 AM
Data Sourced
via MITRE·01:33 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for TOTOLINK X5000R?
The vulnerability ID for TOTOLINK X5000R is CVE-2021-45735.
2
What is the severity of CVE-2021-45735?
The severity of CVE-2021-45735 is high with a CVSS score of 7.5.
3
How does the vulnerability impact TOTOLINK X5000R?
The vulnerability allows attackers to intercept user credentials via packet capture software by exploiting the use of HTTP protocol for authentication in the admin interface.
4
What is the affected software version of TOTOLINK X5000R?
The affected software version of TOTOLINK X5000R is 9.1.0u.6118_B20201102.
5
Is TOTOLINK X5000R vulnerable to CVE-2021-45735?
Yes, TOTOLINK X5000R is vulnerable to CVE-2021-45735.