CVE-2026-15271

Estado: AplazadaAlta (7.7)—

A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. The manipulation leads to least privilege violation. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitation is known to be difficult.

CVSS

Versión: 4.0
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Puntuación base: 7.7

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.71%
Percentil entre todas las CVEs puntuadas: 52
Fecha de la puntuación: 6/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

ExplotaciónT1210 Exploitation of Remote Serviceslateral movement85 %
Impacto principalT1068 Exploitation for Privilege Escalationprivilege escalation80 %

Vulnerabilidad remota en interfaz web que requiere privilegios (PR:L), complejidad alta (AC:H) y viola privilegios. T1210 por explotación de servicio remoto autenticado; T1068 por impacto de escalada de privilegios (least privilege violation).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Threat Intelligence Program Application Isolation and Sandboxing Exploit Protection Update Software Vulnerability Scanning Privileged Account Management

Tecnologías afectadas (7)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Totolink — A3000ru^AI Totolink — A3100r^AI Totolink — A950rg^AI Totolink — Ac1200t10^AI Totolink — Cp450^AI Totolink — Cs185r T10^AI Totolink — Ex200^AI

CWE

CWE-266, CWE-272

Referencias

JSON original (NVD)

Mostrar

{
  "id": "CVE-2026-15271",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-15271",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-07-10T13:37:19.484529Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Secondary",
        "source": "cna@vuldb.com",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "HIGH",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cna@vuldb.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.6
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "cna@vuldb.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 7.7,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "HIGH",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "cna@vuldb.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:totolink:a3000ru:*:*:*:*:*:*:*:*"
          ],
          "vendor": "TOTOLINK",
          "modules": [
            "Web Interface"
          ],
          "product": "A3000RU",
          "versions": [
            {
              "status": "affected",
              "version": "20260906"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:totolink:a3100r:*:*:*:*:*:*:*:*"
          ],
          "vendor": "TOTOLINK",
          "modules": [
            "Web Interface"
          ],
          "product": "A3100R",
          "versions": [
            {
              "status": "affected",
              "version": "20260906"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:totolink:a950rg:*:*:*:*:*:*:*:*"
          ],
          "vendor": "TOTOLINK",
          "modules": [
            "Web Interface"
          ],
          "product": "A950RG",
          "versions": [
            {
              "status": "affected",
              "version": "20260906"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:totolink:ac1200t10:*:*:*:*:*:*:*:*"
          ],
          "vendor": "TOTOLINK",
          "modules": [
            "Web Interface"
          ],
          "product": "AC1200T10",
          "versions": [
            {
              "status": "affected",
              "version": "20260906"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:totolink:cp450:*:*:*:*:*:*:*:*"
          ],
          "vendor": "TOTOLINK",
          "modules": [
            "Web Interface"
          ],
          "product": "CP450",
          "versions": [
            {
              "status": "affected",
              "version": "20260906"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:totolink:cs185r_t10:*:*:*:*:*:*:*:*"
          ],
          "vendor": "TOTOLINK",
          "modules": [
            "Web Interface"
          ],
          "product": "CS185R_T10",
          "versions": [
            {
              "status": "affected",
              "version": "20260906"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:totolink:ex200:*:*:*:*:*:*:*:*"
          ],
          "vendor": "TOTOLINK",
          "modules": [
            "Web Interface"
          ],
          "product": "EX200",
          "versions": [
            {
              "status": "affected",
              "version": "20260906"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-07-09T22:17:02.210",
  "references": [
    {
      "url": "https://app.notion.com/p/A3000RU-V5-9c-5185-37a1f5ba989080d38bb6ca58b2a98c64?source=copy_link",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/cve/CVE-2026-15271",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/submit/852316",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/submit/852317",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/submit/852318",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/submit/852319",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/submit/852320",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/submit/852321",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/submit/852323",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/vuln/377214",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/vuln/377214/cti",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://www.totolink.net/",
      "source": "cna@vuldb.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cna@vuldb.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-266"
        },
        {
          "lang": "en",
          "value": "CWE-272"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. The manipulation leads to least privilege violation. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitation is known to be difficult."
    }
  ],
  "lastModified": "2026-09-03T04:15:22.320",
  "sourceIdentifier": "cna@vuldb.com"
}