Lucene search
HistorySep 06, 2022 - 5:15 p.m.
CVE-2022-40109
totolink a3002r
vulnerability
insecure permissions
binary
boa
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.013
Percentile
86.0%
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa.
Affected configurations
Node
totolinka3002r_firmwareMatch1.1.1-b20200824.0128
totolinka3002rMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| totolink | a3002r_firmware | 1.1.1-b20200824.0128 | cpe:2.3:o:totolink:a3002r_firmware:1.1.1-b20200824.0128:*:*:*:*:*:*:* |
| totolink | a3002r | - | cpe:2.3:h:totolink:a3002r:-:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2022-09-06 17:15:00
cvelist
cvelist
CVE-2022-40109
2022-09-06 16:46:53
cve
cve
CVE-2022-40109
2022-09-06 17:15:08
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.013
Percentile
86.0%
Related for NVD:CVE-2022-40109