Volerion logoVolerion
Volerion logoVolerion

TOTOLINK A3700R Improper Access Control Vulnerability in setSmartQosCfg Function

Vulnerability

A critical vulnerability has been identified in the TOTOLINK A3700R router, specifically in version 9.1.2u.5822_B20200513. The issue arises in the setSmartQosCfg function within the /cgi-bin/cstecgi.cgi file, where improper access controls allow for remote exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized access or manipulation of QoS (Quality of Service) settings on the affected router.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
6.0
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.