Description
A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Totolink | A3002MU | 1.0.0-B20230403.1455 | — |
References
- VDB-413465 | Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization vdb-entry technical-description
- VDB-413465 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-105284 | CVE Analysis and Report third-party-advisory
- Submit #977217 | TOTOLINK A3002MU V1.0.0-B20230403.1455 Authorization Bypass third-party-advisory
- https://gist.github.com/H3rmesk1t/ac6e91a8fba51002be085755c8bf7d43 exploit
- https://www.totolink.net/ product