| عنوان | TOTOLink CA750-PoE V6.2c.510 Command Injection |
|---|
| الوصف | We found an Command Injection vulnerability in TOTOLink router with firmware which was released recently, allows remote attackers to execute arbitrary OS commands from a crafted request.In setWiFiWpsConfig function, PIN is directly passed by the attacker, so we can control the PIN to attack the OS.
In setWiFiWpsConfig function, PIN is directly passed by the attacker, so we can control the PIN to attack the OS. |
|---|
| المصدر | ⚠️ https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_57/57.md |
|---|
| المستخدم | Buoy_yes (UID 97629) |
|---|
| ارسال | 27/04/2026 08:31 AM (5 أشهر منذ) |
|---|
| الاعتدال | 25/05/2026 09:44 PM (29 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 365561 [Totolink CA750-PoE 6.2c.510 Setting /cgi-bin/cstecgi.cgi setWiFiWpsConfig PIN تجاوز الصلاحيات] |
|---|
| النقاط | 19 |
|---|