Submit #377543: TOTOLINK A3100R V4.1.2cu.5050_B20200504 Command Injectioninfo

TitleTOTOLINK A3100R V4.1.2cu.5050_B20200504 Command Injection
DescriptionIn the A3100R V4.1.2cu.5050_B20200504 firmware has a command injection vulnerability in the telnet_enabled parameter from setTelnetCfg function.
Source⚠️ https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3100R/setTelnetCfg.md
User
 yhryhryhr_tu (UID 66750)
Submission07/19/2024 18:16 (2 years ago)
Moderation07/27/2024 19:27 (8 days later)
StatusAccepted
VulDB entry272572 [TOTOLINK A3100R 4.1.2cu.5050_B20200504 HTTP POST Request /cgi-bin/cstecgi.cgi setTelnetCfg telnet_enabled command injection]
Points16

Do you need the next level of professionalism?

Upgrade your account now!