FAIL › dossier
a3100r
PRODUCT· dossier confidence 0%
Totolink A3100R firmware is plagued by critical vulnerabilities including command injection and authentication bypasses, reflecting poor security engineering and delayed patching in edge networking devices.
PROFILE
Categorynetworking hardwareWhat they doTotolink A3100R is a wireless router manufactured by Totolink, a networking hardware vendor.
SECURITY POSTURE
Totolink A3100R firmware exhibits a critical track record of unpatched command injection and authentication bypass vulnerabilities, indicating systemic weaknesses in firmware development and patch management.
Notable failures
- CVE-2021-44620 critical RCE via command injection in adm/ntm.asp
- CVE-2021-46009 critical authentication bypass and unauthenticated page reads
Patterns: repeated unpatched edge-device RCEs; authentication bypasses in firmware
FAILURE HISTORY · 2
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2022-03-11 | CVE-2021-44620 | critical | A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime parameters. |
| 2022-03-30 | CVE-2021-46009 | critical | In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without cookies. |
DOSSIER SOURCES
- Company Database Search · www.edgarcompany.sec.gov
- Dana Incorporated - 企查查 · www.qcc.com
- Owlet Baby Care Inc. - Investor Relations · investors.owletcare.com
- Slingshot Aerospace - 2026 Company Profile & Team - Tracxn · tracxn.com
- 吉翁电子（深圳）有限公司 - 企查查 · www.qcc.com
Open questions: Totolink corporate founding date and HQ location · Totolink corporate size and ownership structure
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-12 17:50:15.992349+00:00