CVEvulnerability

CVE-2015-9550

7.5 HIGH Published 2020-11-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-11-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-668

Description

An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices. By sending a specific hel,xasf packet to the WAN interface, it is possible to open the web management interface on the WAN interface.

Affected configurations

• totolink a850r-v1 firmware (< 1.0.1-b20150707.1612) • totolink f1-v2 firmware (< 2.1.1-b20150708.1646) • totolink f2-v1 firmware (< 2.1.0-b20150320.1611) • totolink n150rt-v2 firmware (< 2.1.1-b20150708.1548) • totolink n151rt-v2 firmware (< 1.1-b20150708.1559) • totolink n300rh-v2 firmware (< 2.0.1-b20150708.1625) • totolink n300rh-v3 firmware (< 3.0.0-b20150331.0858) • totolink n300rt-v2 firmware (< 2.1.1-b20150708.1613)

Related

Weakness · CWE (1)

  • CWE-668 Exposure of Resource to Wrong Sphere weakness

References