CVE-2023-46992

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-10-31 · updated 2026-06-17
Weakness: CWE-863

Description

TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control. Attackers are able to reset serveral critical passwords without authentication by visiting specific pages.

Affected products

Totolink A3300R: 17.0.0cu.557_b20221024

References

https://github.com/AuroraHaaash/vul_report/blob/main/TOTOLINK%20A3300R/readme.md
https://github.com/AuroraHaaash/vul_report/blob/main/TOTOLINK%20A3300R/readme.md

Get alerted when CVE-2023-46992 or the next vulnerability affects your stack