// For flags

CVE-2023-43141

 

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Attend
*SSVC
Descriptions

TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control.

TOTOLINK A3700R V9.1.2u.6134_B20201202 y N600R V5.3c.5137 son vulnerables a un control de acceso incorrecto.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:Attend
Exploitation
None
Automatable
Yes
Tech. Impact
Total
* Organization's Worst-case Scenario
Timeline
  • 2023-09-18 CVE Reserved
  • 2023-09-25 CVE Published
  • 2024-09-24 CVE Updated
  • 2024-09-24 First Exploit
  • 2024-12-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-284: Improper Access Control
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Totolink
Search vendor "Totolink"
 A3700r Firmware
Search vendor "Totolink" for product "A3700r Firmware"
 9.1.2u.6134_b20201202
Search vendor "Totolink" for product "A3700r Firmware" and version "9.1.2u.6134_b20201202"
-
Affected
in Totolink
Search vendor "Totolink"
 A3700r
Search vendor "Totolink" for product "A3700r"
--
Safe
Totolink
Search vendor "Totolink"
 N600r Firmware
Search vendor "Totolink" for product "N600r Firmware"
 4.3.0cu.7647_b20210106
Search vendor "Totolink" for product "N600r Firmware" and version "4.3.0cu.7647_b20210106"
-
Affected
in Totolink
Search vendor "Totolink"
 N600r
Search vendor "Totolink" for product "N600r"
--
Safe