| タイトル | TOTOLink CA750-PoE V6.2c.510 Command Injection |
|---|
| 説明 | We found an Command Injection vulnerability in TOTOLink router with firmware which was released recently, allows remote attackers to execute arbitrary OS commands from a crafted request.In setWiFiWpsConfig function, PIN is directly passed by the attacker, so we can control the PIN to attack the OS.
In setWiFiWpsConfig function, PIN is directly passed by the attacker, so we can control the PIN to attack the OS. |
|---|
| ソース | ⚠️ https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_57/57.md |
|---|
| ユーザー | Buoy_yes (UID 97629) |
|---|
| 送信 | 2026年04月27日 08:31 (1 月 ago) |
|---|
| モデレーション | 2026年05月25日 21:44 (29 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 365561 [Totolink CA750-PoE 6.2c.510 Setting /cgi-bin/cstecgi.cgi setWiFiWpsConfig PIN 特権昇格] |
|---|
| ポイント | 19 |
|---|