Code injection

2023-12-0615:15:00

PRIOn knowledge base

www.prio-n.com

totolink a3002ru

version 2.0.0-b20190902.1958

post-authentication

rce

incorrect access control

front-end security

arbitrary code

nvd

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.8%

JSON

TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows attackers to bypass front-end security restrictions and execute arbitrary code.

CPENameOperatorVersion
a3002ru_firmwareeq2.0.0-b20190902.1958

CPE	Name	Operator	Version
	a3002ru_firmware	eq	2.0.0-b20190902.1958

References

github.com/xieqiang11/security_research/blob/main/TOTOLINK-A3002RU-RCE.md