Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
TOTOLINK LR350 formLoginAuth.htm authorization
Vulnerability Description
A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.3.5u.6698_B20230810 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
通过用户控制密钥绕过授权机制
Vulnerability Title
TOTOLINK LR350 安全漏洞
Vulnerability Description
TOTOLINK LR350是中国吉翁电子（TOTOLINK）公司的一款无线路由器。 TOTOLINK LR350 9.3.5u.6369及之前版本存在安全漏洞，该漏洞源于/formLoginAuth.htm的参数authCode的输入值为1时，会导致授权绕过。
CVSS Information
N/A
Vulnerability Type
N/A