Design/Logic Flaw

2020-11-2421:15:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.2%

JSON

An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices. By sending a specific hel,xasf packet to the WAN interface, it is possible to open the web management interface on the WAN interface.

CPENameOperatorVersion
a850r-v1_firmwareeq< 1.0.1-b20150707.1612
f1-v2_firmwareeq< 2.1.1-b20150708.1646
f2-v1_firmwareeq< 2.1.0-b20150320.1611
n150rt-v2_firmwareeq< 2.1.1-b20150708.1548
n151rt-v2_firmwareeq< 1.1-b20150708.1559
n300rh-v2_firmwareeq< 2.0.1-b20150708.1625
n300rh-v3_firmwareeq< 3.0.0-b20150331.858
n300rt-v2_firmwareeq< 2.1.1-b20150708.1613

Name	Operator	Version
a850r-v1_firmware	eq	< 1.0.1-b20150707.1612
f1-v2_firmware	eq	< 2.1.1-b20150708.1646
f2-v1_firmware	eq	< 2.1.0-b20150320.1611
n150rt-v2_firmware	eq	< 2.1.1-b20150708.1548
n151rt-v2_firmware	eq	< 1.1-b20150708.1559
n300rh-v2_firmware	eq	< 2.0.1-b20150708.1625
n300rh-v3_firmware	eq	< 3.0.0-b20150331.858
n300rt-v2_firmware	eq	< 2.1.1-b20150708.1613