Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-64485
HistoryAug 23, 2021 - 12:00 a.m.

TOTOLINK A3002R Cross-Site Scripting Vulnerability (CNVD-2021-64485)

2021-08-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
totolink a3002r
cross-site scripting
vulnerability
router
ac1200
wireless
dual-band
gigabit
ddns.

EPSS

0.001

Percentile

43.2%

TOTOLINK A3002RU is an AC1200 wireless dual-band gigabit router. ddns.htm in TOTOLINK A3002R version 1.1.1-B20200824 is vulnerable to cross-site scripting. An attacker can modify the “domain” field, “server address” field, “username/email” or "password/key " field to execute arbitrary JavaScript.

EPSS

0.001

Percentile

43.2%

Related for CNVD-2021-64485