CVE-2026-5850

A vulnerability was identified in Totolink A7100RU 7.4cu.2313b20191024. This affects the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument pptpPassThru leads to os command injection. Remote exploitation of the attack is possible...

TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32909)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the failure of the UploadFirmwareFile function in the /cgi-bin/cstecgi.cgi file to...

TOTOLINK A7100RU operating system command injection vulnerability (CNVD-2026-32780)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setWanCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly...

TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32908)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setWizardCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly...

TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32910)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the UploadOpenVpnCert function in the cstecgi.cgi file, which fails to properly handle the...

Totolink A3002MU formWlanSetup file wan-url parameter stack buffer overflow vulnerability

Totolink A3002MU is a wireless router product that provides network connectivity and wireless access. A stack buffer overflow vulnerability exists in the Totolink A3002MU. The vulnerability stems from a failure to properly handle the wan-url parameter in the HTTP request handling component, which...

TOTOLINK A7000R cstecgi.cgi setWiFiEasyGuestCfg function ssid5g parameter stack buffer overflow vulnerability

TOTOLINK A7000R is a wireless router product that is mainly used to provide network connectivity and Wi-Fi access. TOTOLINK A7000R suffers from a stack buffer overflow vulnerability. The vulnerability stems from the setWiFiEasyGuestCfg function in the /cgi-bin/cstecgi.cgi file failing to properly...

The vulnerability of the setAppEasyWizardConfig function in the TOTOLink A3600R router’s microprogramming software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the setAppEasyWizardConfig function in the TOTOLink A3600R router microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary cod...

The vulnerability of the setFirewallType function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router microprogramming software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the setFirewallType function /cgi-bin/cstecgi.cgi of the Totolink A7100RU router software relates to the failure to eliminate special elements used in the operating system’s command for processing the firewallType parameter. Exploiting this vulnerability allows a remote...

The vulnerability of the CsteSystem (/cgi-bin/cstecgi.cgi) function in the Totolink A7100RU router software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the CsteSystem /cgi-bin/cstecgi.cgi function in the Totolink A7100RU router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s command processing when handling the resetFlags parameter. Exploiting...

The vulnerability of the setDdnsCfg function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router’s microprogramming software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the setDdnsCfg function /cgi-bin/cstecgi.cgi of the Totolink A7100RU router software relates to the failure to eliminate special elements used in the operating system’s command for processing the provider parameter. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the setRemoteCfg function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the setRemoteCfg function /cgi-bin/cstecgi.cgi in the Totolink A7100RU router software lies in the lack of measures to neutralize special elements used in the operating system’s command for processing the enable parameter. Exploiting this vulnerability allows a remote attacke...

The vulnerability of the setNtpCfg function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router’s microprogramming software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the setNtpCfg function /cgi-bin/cstecgi.cgi in the Totolink A7100RU router’s microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the tz parameter. Exploiting this vulnerability allows...

The vulnerability of the setScheduleCfg function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router’s microprogramming software allows a hacker to circumvent existing security restrictions and execute arbitrary commands.

The vulnerability of the setScheduleCfg function /cgi-bin/cstecgi.cgi in the Totolink A7100RU router software lies in the lack of measures to neutralize special elements used in the operating system’s commands when processing the mode parameter. Exploiting this vulnerability allows a remote...

TOTOLINK N300RH Operating System Command Injection Vulnerability (CNVD-2026-32760)

TOTOLINK N300RH is a 300Mbps single-band long-range wireless router launched by the TOTOLINK brand. It operates on the IEEE802.11n standard and is designed to enhance wireless coverage. TOTOLINK N300RH has a vulnerability related to operating system command injection. This vulnerability stems fro...

TOTOLINK A7100RU operating system command injection vulnerability (CNVD-2026-32761)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setIpQosRules function in the cstecgi.cgi script, which fails to properly valida...

CVE-2026-6115

A flaw has been found in Totolink A7100RU 7.4cu.2313b20191024. This affects the function setAppCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument enable can lead to os command injection. The attack may be launched remotely. The exploit has...

EUVD-2026-22036

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313b20191024. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument admpass leads to os command injection. The attack can be...

EUVD-2026-22034

A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulnerability is the function sub410188 of the file /boafrm/formWlanSetup of the component HTTP Request Handler. This manipulation of the argument wan-url causes stack-based buffer overflow. Remote exploitation of...

CVE-2026-6194

A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulnerability is the function sub410188 of the file /boafrm/formWlanSetup of the component HTTP Request Handler. This manipulation of the argument wan-url causes stack-based buffer overflow. Remote exploitation of...