Security Advisory
CVE-2018-13315
9.8
CRITICAL
Vulnerability Description
Incorrect access control in formPasswordSetup in TOTOLINK A3002RU version 1.0.8 allows attackers to change the admin user's password via an unauthenticated POST request.
Published Date
November 26, 2018
Official Source
NIST NVD Advisory