PT-2023-12944 · Totolink Technology · Totolink Cpe

CVE-2022-28492

·

Publicado

2023-03-23

·

Atualizado

2023-03-27

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TOTOLINK Technology CPE version V6.3c.566
Description The issue allows remote attackers to bypass login, potentially granting unauthorized access.
Recommendations For TOTOLINK Technology CPE version V6.3c.566, consider disabling remote login functionality until a patch is available. Restrict access to the device to minimize the risk of exploitation.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2022-28492

Produtos afetados

Totolink Cpe