HTTP Authentication Vulnerability in TOTOLINK X5000R v9.1.0u.6118_B20201102

CVE-2021-45735 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software.

Learn more about our User Device Pen Test.