Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration. The SESSION_ID is predictable. An attacker can hijack a valid session and conduct further malicious operations.Referenceshttp://a3100r.comhttps://hackmd.io/Ynwm8NnQSiK0xm7QKuNteg
