CVE-2021-34218: Totolink a3002r Firmware

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /add/ , /img/, /js/, and /mobile directories via GET Parameter.

Affected products

• Totolink a3002r Firmware: version 1.1.1-b20200824 only

Published 2021-08-20. Last modified 2026-06-17.