CVE-2021-46006: Totolink a3100r Firmware

Medium severity, CVSS 6.5. EPSS: 5.5% chance of exploitation in the next 30 days.

In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authentication.

Affected products

• Totolink a3100r Firmware: version 5.9c.4577 only

Published 2022-03-30. Last modified 2026-07-09.