CVE-2021-35324

CRITICAL

TOTOLINK A720R <V4.1.5cu.470 - Auth Bypass

Title source: llm

A vulnerability in the Form_Login function of TOTOLINK A720R A720R_Firmware V4.1.5cu.470_B20200911 allows attackers to bypass authentication.

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 9.8

EPSS 0.0076

EPSS Percentile 73.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Status published

Products (1)

totolink/a720r_firmware 4.1.5cu.470_b20200911

Published Aug 05, 2021

Tracked Since Feb 18, 2026