CVE-2015-9550
High
Description
An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices. By sending a specific hel,xasf packet to the WAN interface, it is possible to open the web management interface on the WAN interface.
SeverityHigh
CVSS7.5
Exploit probability—
ProductTotolink A850r-v1 Firmware
PublishedNov 24, 2020
First seenNov 24, 2020
How to fix
Update
- totolink a850r-v1_firmware1.0.1-b20150707.1612 or later
- totolink f1-v2_firmware2.1.1-b20150708.1646 or later
- totolink f2-v1_firmware2.1.0-b20150320.1611 or later
- totolink n150rt-v2_firmware2.1.1-b20150708.1548 or later
- totolink n151rt-v2_firmware1.1-b20150708.1559 or later
- totolink n300rh-v2_firmware2.0.1-b20150708.1625 or later
- totolink n300rh-v3_firmware3.0.0-b20150331.0858 or later
- totolink n300rt-v2_firmware2.1.1-b20150708.1613 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| totolink a850r-v1_firmware | v < 1.0.1-b20150707.1612 | 1.0.1-b20150707.1612 |
| totolink f1-v2_firmware | v < 2.1.1-b20150708.1646 | 2.1.1-b20150708.1646 |
| totolink f2-v1_firmware | v < 2.1.0-b20150320.1611 | 2.1.0-b20150320.1611 |
| totolink n150rt-v2_firmware | v < 2.1.1-b20150708.1548 | 2.1.1-b20150708.1548 |
| totolink n151rt-v2_firmware | v < 1.1-b20150708.1559 | 1.1-b20150708.1559 |
| totolink n300rh-v2_firmware | v < 2.0.1-b20150708.1625 | 2.0.1-b20150708.1625 |
| totolink n300rh-v3_firmware | v < 3.0.0-b20150331.0858 | 3.0.0-b20150331.0858 |
| totolink n300rt-v2_firmware | v < 2.1.1-b20150708.1613 | 2.1.1-b20150708.1613 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.