CVE-2026-5178 in A3300R
Zusammenfassung (Englisch)
A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this issue is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument vlanPriLan3 leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Veröffentlichung
31.03.2026
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 354246 | Totolink A3300R cstecgi.cgi setIptvCfg erweiterte Rechte | 77 | Proof-of-Concept | Nicht definiert | CVE-2026-5178 |