| Title | TOTOLINK NR1800X V9.1.0u.6681_B20230703 Command Injection |
|---|
| Description | OS Command Injection Vulnerability in TOTOLINK Firmware
Due to the lack of a physical device, the firmware binary was patched in the analysis environment to simulate the required execution conditions. Under normal circumstances, a valid cookie is required to access the vulnerable code path before triggering the related functionality.
During reverse engineering, it was found that the vendor stripped the UploadFirmwareFile function symbol from the firmware binary, requiring manual analysis to identify the corresponding function and execution flow.
The vulnerability exists because user-controlled input is not properly validated or sanitized before being concatenated into a system command. The constructed command is subsequently executed through system(), allowing attacker-controlled data to influence command execution.
This improper handling of user input introduces an OS command injection vulnerability (CWE-78), which may allow an attacker with access to the vulnerable interface to execute arbitrary operating system commands with the privileges of the affected service. |
|---|
| Source | ⚠️ https://github.com/lxiansheng488-bit/-/blob/main/TOTOlink/totolink%20UploadFirmwareFile.pdf |
|---|
| User | Anonymous User |
|---|
| Submission | 07/15/2026 13:25 (2 months ago) |
|---|
| Moderation | 08/29/2026 20:54 (2 months later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 210221 [TOTOLINK NR1800X 9.1.0u.6279_B20210910 /cgi-bin/cstecgi.cgi UploadFirmwareFile command injection] |
|---|
| Points | 0 |
|---|