| शीर्षक | TOTOLINK NR1800X V9.1.0u.6681_B20230703 Command Injection |
|---|
| विवरण | Since no physical device was available, the binary was patched to facilitate vulnerability analysis. Under normal conditions, the stack overflow can only be reached after passing the required cookie validation. Therefore, the necessary parameters were simulated during the analysis. Additionally, the vendor stripped the `setUssd` function from the released binary, making reverse engineering more difficult.
The application does not validate user-supplied input before concatenating it into a command executed via `system()`, resulting in a command injection vulnerability. It should be noted that the `%s` placeholder in the command string is enclosed in double quotation marks. Therefore, the crafted payload must preserve the correct command syntax and properly account for the surrounding quotation marks.
|
|---|
| स्रोत | ⚠️ https://github.com/lxiansheng488-bit/-/blob/main/TOTOlink/totolink%20setuuid%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5.pdf |
|---|
| उपयोगकर्ता | Anonymous User |
|---|
| सबमिशन | 16/07/2026 06:55 AM (2 महीनों पहले) |
|---|
| संयम | 30/08/2026 08:27 AM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 397092 [TOTOLINK NR1800X 9.1.0u.6681_B20230703 /cgi-bin/cstecgi.cgi setUssd ussd अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|