4.1.5cu.532.b20210610

DATE	CVE	VULNERABILITY TITLE	RISK
2023-02-17	CVE-2023-23064	Incorrect Authorization vulnerability in Totolink A720R Firmware 4.1.5Cu.532B20210610 TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control. network low complexity totolink CWE-863 critical	9.8
2022-08-29	CVE-2022-36610	Use of Hard-coded Credentials vulnerability in Totolink A720R Firmware 4.1.5Cu.532B20210610 TOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample. local low complexity totolink CWE-798	7.8
2022-08-25	CVE-2022-36456	OS Command Injection vulnerability in Totolink A720R Firmware 4.1.5Cu.532B20210610 TOTOLink A720R V4.1.5cu.532_B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi. local low complexity totolink CWE-78	7.8