Submit #377080: TOTOLINK A3700R V9.1.2u.5822_B20200513 Command Injectioninfo

TitleTOTOLINK A3700R V9.1.2u.5822_B20200513 Command Injection
DescriptionIn the A3700R V9.1.2u.5822_B20200513 firmware has a command injection vulnerability in the the hostName parameter from setWanCfg function.
Source⚠️ https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3700R/setWanCfg.md
User
 yhryhryhr_tu (UID 66750)
Submission07/18/2024 20:34 (2 years ago)
Moderation07/27/2024 20:43 (9 days later)
StatusAccepted
VulDB entry272574 [TOTOLINK A3700R 9.1.2u.5822_B20200513 /cgi-bin/cstecgi.cgi setWanCfg Hostname command injection]
Points16

Interested in the pricing of exploits?

See the underground prices here!