CVE-2021-46010: Totolink a3100r Firmware

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration. The SESSION_ID is predictable. An attacker can hijack a valid session and conduct further malicious operations.

Affected products

• Totolink a3100r Firmware: version 5.9c.4577 only

Published 2022-03-30. Last modified 2026-07-09.