Lucene search

K
cve[email protected]CVE-2015-9550
HistoryNov 24, 2020 - 9:15 p.m.

CVE-2015-9550

2020-11-2421:15:11
CWE-668
web.nvd.nist.gov
30
In Wild
cve-2015-9550
totolink
security vulnerability
unauthorized access
web management interface
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.2%

An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices. By sending a specific hel,xasf packet to the WAN interface, it is possible to open the web management interface on the WAN interface.

Affected configurations

NVD
Node
totolinka850r-v1_firmwareRange<1.0.1-b20150707.1612
AND
totolinka850r-v1Match-
Node
totolinkf1-v2_firmwareRange<2.1.1-b20150708.1646
AND
totolinkf1-v2Match-
Node
totolinkf2-v1_firmwareRange<2.1.0-b20150320.1611
AND
totolinkf2-v1Match-
Node
totolinkn150rt-v2_firmwareRange<2.1.1-b20150708.1548
AND
totolinkn150rt-v2Match-
Node
totolinkn151rt-v2_firmwareRange<1.1-b20150708.1559
AND
totolinkn151rt-v2Match-
Node
totolinkn300rh-v2_firmwareRange<2.0.1-b20150708.1625
AND
totolinkn300rh-v2Match-
Node
totolinkn300rh-v3_firmwareRange<3.0.0-b20150331.0858
AND
totolinkn300rh-v3Match-
Node
totolinkn300rt-v2_firmwareRange<2.1.1-b20150708.1613
AND
totolinkn300rt-v2Match-

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.2%

Related for CVE-2015-9550