FAIL › dossier
a3100r firmware
PRODUCT· dossier confidence 0%
Totolink A3100R firmware is plagued by critical vulnerabilities including command injection and authentication bypasses, reflecting poor security engineering and delayed patching in edge networking devices.
PROFILE
CategoryIoT RouterWhat they doTotolink A3100R is a wireless router manufactured by Totolink, a Chinese networking equipment vendor.
SECURITY POSTURE
Totolink A3100R firmware exhibits a critical track record of unpatched command injection and authentication bypass vulnerabilities, indicating systemic weaknesses in firmware development and patch management.
Notable failures
- CVE-2021-44620: Command injection via hosTime parameters in adm/ntm.asp
- CVE-2021-46009: Unauthenticated page reads and admin config bypass
Patterns: repeated unpatched edge-device RCEs; lack of authentication controls on admin interfaces
FAILURE HISTORY · 2
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2022-03-11 | CVE-2021-44620 | critical | A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime parameters. |
| 2022-03-30 | CVE-2021-46009 | critical | In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without cookies. |
DOSSIER SOURCES
- Cadence Design Systems, Inc. - 企查查 · www.qcc.com
- Where Am I Right Now - Show Your Current Location on Maps · whereamirightnow.com
- iDatalink - New Firmware · www.idatalink.com
- Cyberhaven, Inc. Headquarters and Global Office Locations · exa.ai
Open questions: Totolink's founding year and headquarters location · Totolink's corporate size and ownership structure · Totolink's official website URL
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-12 17:45:23.033807+00:00