CVE-2022-29644: Critical severity totolink a3100r vulnerability
TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /webcste/cgi-bin/product.ini.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-29644?
CVE-2022-29644 is a vulnerability discovered in TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 firmware versions, which contain a hard coded password for the telnet service stored in the component /web_cste/cgi-bin/product.ini.
What is the severity of CVE-2022-29644?
The severity of CVE-2022-29644 is critical with a CVSS score of 9.8.
How can I determine if my TOTOLINK A3100R is affected by CVE-2022-29644?
If your TOTOLINK A3100R firmware version is either V4.1.2cu.5050_B20200504 or V4.1.2cu.5247_B20211129, then it is affected by CVE-2022-29644.
How can I fix CVE-2022-29644?
To fix CVE-2022-29644, it is recommended to update your TOTOLINK A3100R firmware to a version that does not contain the hard coded password vulnerability.
Where can I find more information about CVE-2022-29644?
You can find more information about CVE-2022-29644 at the following reference link: https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R/7.md