提交 #563429: TOTOLINK A720R V4.1.5cu.374 Missing Authentication信息

标题TOTOLINK A720R V4.1.5cu.374 Missing Authentication
描述The TOTOLINK A720R V4.1.5cu.374 firmware contains an unauthorized reboot device vulnerability. This vulnerability occurs when a POST request is sent to the /cgi-bin/cstecgi.cgi with the parameter {"topicurl":"RebootSystem"}, allowing an attacker to reboot the device without authentication.
来源⚠️ https://github.com/at0de/my_vulns/blob/main/TOTOLINK/A720R/RebootSystem.md
用户
 153528990 (UID 64409)
提交2025-04-22 03時42分 (12 月前)
管理2025-05-04 20時24分 (13 days later)
状态已接受
VulDB条目307372 [TOTOLINK A720R 4.1.5cu.374 /cgi-bin/cstecgi.cgi topicurl 弱身份验证]
积分18

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!