PT-2021-20402

CVE-2021-34218

·

Published

2021-08-20

·

Updated

2021-08-26

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions: TOTOLINK-A702R version V1.0.0-B20161227.1023
Description: The issue allows an attacker to access certain directories, including /add/, /img/, /js/, and /mobile, via a GET parameter. This is related to directory indexing in the login portal.
Recommendations: For TOTOLINK-A702R version V1.0.0-B20161227.1023, consider restricting access to the /add/, /img/, /js/, and /mobile directories as a temporary workaround until a patch is available. Avoid using the GET parameter that allows access to these directories until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
CVE-2021-34218
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com