The vulnerability of the recvUpgradeNewFw() function (/cgi-bin/cstecgi.cgi) in the TOTOLINK WA300 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the recvUpgradeNewFw function /cgi-bin/cstecgi.cgi in the TOTOLINK WA300 router microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...