7.7

CVE-2026-15271

TOTOLINK EX200 Web boa.conf least privilege violation

A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. The manipulation leads to least privilege violation. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitation is known to be difficult.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerTOTOLINK
≫
Produkt A3000RU
Version 20260906
Status affected
HerstellerTOTOLINK
≫
Produkt A3100R
Version 20260906
Status affected
HerstellerTOTOLINK
≫
Produkt A950RG
Version 20260906
Status affected
HerstellerTOTOLINK
≫
Produkt AC1200T10
Version 20260906
Status affected
HerstellerTOTOLINK
≫
Produkt CP450
Version 20260906
Status affected
HerstellerTOTOLINK
≫
Produkt CS185R_T10
Version 20260906
Status affected
HerstellerTOTOLINK
≫
Produkt EX200
Version 20260906
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
cna@vuldb.com 7.5 1.6 5.9
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
cna@vuldb.com 7.7 0 0
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
cna@vuldb.com 7.1 3.9 10
AV:N/AC:H/Au:S/C:C/I:C/A:C
CWE-266 Incorrect Privilege Assignment

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

CWE-272 Least Privilege Violation

The elevated privilege level required to perform operations such as chroot() should be dropped immediately after the operation is performed.

https://www.totolink.net/
https://vuldb.com/vuln/377214
https://vuldb.com/vuln/377214/cti
https://vuldb.com/cve/CVE-2026-15271
https://vuldb.com/submit/852316
https://vuldb.com/submit/852317
https://vuldb.com/submit/852318
https://vuldb.com/submit/852319
https://vuldb.com/submit/852320
https://vuldb.com/submit/852321
https://vuldb.com/submit/852323
https://app.notion.com/p/A3000RU-V5-9c-5185-37a1f5ba989080d38bb6ca58b2a98c64?source=copy_link