In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
2025-08-13T16:15:32.187
2025-08-14T14:15:33.323
Modified
CVSSv3.1: 9.8 (CRITICAL)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | totolink | a7000r_firmware | 9.1.0u.6115_b20201022 | Yes |
Hardware | totolink | a7000r | - | No |