High severity7.5NVD Advisory· Published Feb 4, 2022· Updated Jun 17, 2026

CVE-2021-45735

Description

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software.

Affected products

Totolink/X5000Rllm-fuzzy2 versions
= v9.1.0u.6118_B20201102+ 1 more
- (no CPE)range: = v9.1.0u.6118_B20201102
- (no CPE)
Totolink/X5000r Firmware
cpe:2.3:o:totolink:x5000r_firmware:9.1.0u.6118_b20201102:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_12/12.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000