CVE-2024-28338: Totolink a8000ru Firmware

High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days.

A login bypass in TOTOLINK A8000RU V7.1cu.643_B20200521 allows attackers to login to Administrator accounts via providing a crafted session cookie.

Affected products

• Totolink a8000ru Firmware: version 7.1cu.643_b20200521 only

Published 2024-03-12. Last modified 2026-06-17.