CVE-2021-44620: Totolink a3100r Firmware

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime parameters.

Affected products

• Totolink a3100r Firmware: up to and including 4.1.2cu.5050_b20200504

Published 2022-03-11. Last modified 2026-07-09.