CVE-2022-48066

An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-01-27

Last modified

2025-03-28

Weaknesses

CWE-287

Affected products

• A830r Firmware (Totolink)

References

• https://befitting-vinca-933.notion.site/Totolink-A830R-V4-1-2cu-5182-Login-Authentication-Bypass-Vulnerability-e0dfe09f…