CVE-2021-46008: Totolink a3100r Firmware

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

In totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official released firmware. An attacker, who has connected to the Wi-Fi, can easily telnet into the target with root shell if the telnet is function turned on.

Affected products

• Totolink a3100r Firmware: version 5.9c.4577 only

Published 2022-03-30. Last modified 2026-07-09.