← Back to browse · API

CVE-2022-48066

Severity

CRITICAL

CVSS

9.8

EPSS

0.02443

Risk score

40.06

CISA KEV

No

PoC

No

Published

2023-01-27

Modified

2025-03-28

First seen

2026-08-07

Aliases

EUVD-2022-50780, GHSA-5JFH-7XPV-W2PP

Products

n/a:n/a n/a

Sources

euvd EUVD-2022-50780

Description

An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie.

References