CVE-2023-46992: High severity TOTOLINK A3300R firmware vulnerability
Published Oct 31, 2023
·Updated
TOTOLINK A3300R V17.0.0cu.557B20221024 is vulnerable to Incorrect Access Control. Attackers are able to reset serveral critical passwords without authentication by visiting specific pages.
Affected Software
2 affected components
All of the following
TOTOLINK A3300R firmware=17.0.0cu.557_b20221024
TOTOLINK A3300R
Event History
Oct 31, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-46992?
The severity of CVE-2023-46992 is high with a CVSS score of 7.5.
2
How does CVE-2023-46992 affect TOTOLINK A3300R V17.0.0cu.557_B20221024?
TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control, allowing attackers to reset critical passwords without authentication.
3
What is the affected software version for CVE-2023-46992?
The affected software version for CVE-2023-46992 is Totolink A3300R Firmware V17.0.0cu.557_B20221024.
4
Can attackers reset critical passwords without authentication on TOTOLINK A3300R V17.0.0cu.557_B20221024?
Yes, attackers can reset critical passwords without authentication on TOTOLINK A3300R V17.0.0cu.557_B20221024.
5
How can I fix CVE-2023-46992?
To fix CVE-2023-46992, it is recommended to install the latest firmware update provided by Totolink.