Description
Incorrect access control in formPasswordSetup in TOTOLINK A3002RU version 1.0.8 allows attackers to change the admin user's password via an unauthenticated POST request.
Unscored
CVE-2018-13315
EUVD-2018-5263GHSA-vw86-c7px-f6g6
Incorrect access control in formPasswordSetup in TOTOLINK A3002RU version 1.0.8 allows attackers to change the admin user's password via an…
Published Nov 26, 2018 · Updated Aug 5, 2024 · Assigned by mitre