CVE-2021-46007: Totolink AR3100R Firmware

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

totolink a3100r V5.9c.4577 is vulnerable to os command injection. The backend of a page is executing the "ping" command, and the input field does not adequately filter special symbols. This can lead to command injection attacks.

Affected products

• Totolink AR3100R Firmware: version 5.9c.4577 only

Published 2022-03-30. Last modified 2026-07-09.